path: root/tests/metadata.aaitest.xml

<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Name="urn:mace:switch.ch:aaitest" validUntil="2009-10-19T13:00:17Z" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"></ds:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod>
<ds:Reference URI="">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
<ds:DigestValue>27x/v5MfFhmpBDaaY1EMaDlToPU=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
FGn6KVbkrjB4zVPZbN/YyCiCMvQ9amocNKR9GDt4jqBPj3OzomlK4/JjWjqh3FRTPLo6kYcbDr53
UMXsvN6DGhCGAJO4PlhiVViFHyyWfG38nEixvZBhBdjnDaIneNBAkfwY7gIlph7dhlFGI9s3mqrH
XXth83l3bGO1BtUQ85Wbb6AuC2ul7JH0Em42yGxmxqpVdWe3ila2gACf64+tgJHDDNyfCqNn86o7
a6WOdmDXaDum52dQ7eDTqG7sEgRbwX0QEjk36twR2TdUOk0WW9/Tfz6cglYhoNxApHVXYNPm17zd
xdTr3yS+MFuh4HJA75PX8OJrt4sAcwSmi6IDqQ==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
<ds:X509Certificate>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</ds:X509Certificate>
<ds:X509Certificate>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</ds:X509Certificate>
<ds:X509CRL>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</ds:X509CRL>
<ds:X509CRL>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==
</ds:X509CRL>
</ds:X509Data>
</ds:KeyInfo></ds:Signature>

	<Extensions>
	<!-- 
	Release information
	-->
	<switchmd:PublishingInformation xmlns:switchmd="http://www.switch.ch/aai/metadata/extensions">
		<switchmd:Federation>urn:mace:switch.ch:aaitest</switchmd:Federation>
		<switchmd:Description>The metadata contains all accepted root CA certificates for the federation and the descriptions of all accepted Identity Providers and Service Providers</switchmd:Description>
		<switchmd:Author>SWITCH Resource Registry</switchmd:Author>
		<switchmd:CreationDate type="xs:dateTime">2009-10-14T13:00:17Z</switchmd:CreationDate>
		<switchmd:Note>
		This metadata is for test purposes only!
		It contains the AAI Test certificate,
		which is unsafe to use in a production environment.
		SWITCH won't take responsibility for the data included
		in this file.
		##########################################################
		# DO NOT USE THIS META DATA IN A PRODUCTION ENVIRONMENT! #
		##########################################################
</switchmd:Note>
	</switchmd:PublishingInformation>

	<!-- 
	Accepted root CA certificates
	-->
		<shibmd:KeyAuthority xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" VerifyDepth="5">
			<!-- SwissSign CA and chain -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<!-- SwissSign Root CA -->
				<ds:X509Data>
					<ds:X509Certificate>
MIIDtTCCAp2gAwIBAgIIBhDCeat3PfIwDQYJKoZIhvcNAQEFBQAwdjELMAkGA1UE
BhMCQ0gxEjAQBgNVBAoTCVN3aXNzU2lnbjEyMDAGA1UEAxMpU3dpc3NTaWduIENB
IChSU0EgSUsgTWF5IDYgMTk5OSAxODowMDo1OCkxHzAdBgkqhkiG9w0BCQEWEGNh
QFN3aXNzU2lnbi5jb20wHhcNMDAxMTI2MjMyNzQxWhcNMzExMTI2MjMyNzQxWjB2
MQswCQYDVQQGEwJDSDESMBAGA1UEChMJU3dpc3NTaWduMTIwMAYDVQQDEylTd2lz
c1NpZ24gQ0EgKFJTQSBJSyBNYXkgNiAxOTk5IDE4OjAwOjU4KTEfMB0GCSqGSIb3
DQEJARYQY2FAU3dpc3NTaWduLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKw5fjnmNneLQlUCQG8jQLwwfbrOZoUwNX8cbNqhxK03/xUloFVgAt+S
Te2RxNXaCAXLBPn5ZST35TLV57aLmbHCtifv3YZqaaQGvjedltIBMJihJhZ+h3LY
SKsUb+xEJ3x5ZUf8jP+Q1g57y1s8SnBFWN/ni5NkF1Y1y31VwOi9wiOf/VISL+uu
SC4i1CP1Kbz3BDs6Hht1GpRYCbJ/K0bc9oJSpWpT5PGONsGIawqMbJuyoDghsXQ1
pbn2e8K64BSscGZVZTNooSGgNiHmACNJBYXiWVWrwXPF4l6SddmC3Rj0aKXjgECc
FkHLDQcsM5JsK2ZLryTDUsQFbxVP2ikCAwEAAaNHMEUwCwYDVR0PBAQDAgEGMAwG
A1UdEwQFMAMBAf8wHQYDVR0OBBYEFJbXcc05KtT8iLGKq1N4ae+PR34WMAkGA1Ud
IwQCMAAwDQYJKoZIhvcNAQEFBQADggEBAKMy6W8HvZdS1fBpEUzl6Lvw50bgE1Xc
HU1JypSBG9mhdcXZo5AlPB4sCvx9Dmfwhyrdsshc0TP2V3Vh6eQqnEF5qB4lVziT
Bko9mW6Ot+pPnwsy4SHpx3rw6jCYnOqfUcZjWqqqRrq/3P1waz+Mn4cLMVEg3Xaz
qYov/khvSqS0JniwjRlo2H6f/1oVUKZvP+dUhpQepfZrOqMAWZW4otp6FolyQyeU
NN6UCRNiUKl5vTijbKwUUwfER/1Vci3M1/O1QCfttQ4vRN4Buc0xqYtGL3cd5WiO
vWzyhlTzAI6VUdNkQhhHJSAyTpj6dmXDRzrryoFGa2PjgESxz7XBaSI=
					</ds:X509Certificate>
				</ds:X509Data>
				<!-- SwissSign Bronze CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- SwissSign Silver CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- SWITCH CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- SWITCH Server CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- TC Trustcenter Class 2 CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>
MIIDXDCCAsWgAwIBAgICA+owDQYJKoZIhvcNAQEEBQAwgbwxCzAJBgNVBAYTAkRF
MRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTowOAYDVQQKEzFU
QyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJI
MSIwIAYDVQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAyIENBMSkwJwYJKoZIhvcN
AQkBFhpjZXJ0aWZpY2F0ZUB0cnVzdGNlbnRlci5kZTAeFw05ODAzMDkxMTU5NTla
Fw0xMTAxMDExMTU5NTlaMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVy
ZzEQMA4GA1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9y
IFNlY3VyaXR5IGluIERhdGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1
c3RDZW50ZXIgQ2xhc3MgMiBDQTEpMCcGCSqGSIb3DQEJARYaY2VydGlmaWNhdGVA
dHJ1c3RjZW50ZXIuZGUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANo46O0y
AClxgwENv4wB3NrGrTmkqYov1YtcaF9QxmL1Zr3KkSLsqh1R1z2zUbKDTl3LSbDw
TFXlay3HhQswHJJOgtTKAu33b77c4OMUuAVT8pr0VotanoWT0bSCVq5Nu6hLVxa8
/vhYnvgpjbB7zXjJT6yLZwzxnPv8V5tXXE8NAgMBAAGjazBpMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgGGMDMGCWCGSAGG+EIBCAQmFiRodHRwOi8vd3d3
LnRydXN0Y2VudGVyLmRlL2d1aWRlbGluZXMwEQYJYIZIAYb4QgEBBAQDAgAHMA0G
CSqGSIb3DQEBBAUAA4GBAIRS+yjf/x91AbwBvgRWl2p0QiQxg/lGsQaKic+WLDO/
jLVfenKhhQbOhvgFjuj5Jcrag4wGrOs2bYWRNAQ29ELw+HkuCkhcq8xRT3h2oNms
Gb0q0WkEKJHKNhAngFdb0lz1wlurZIFjdFH0l7/NEij3TWZ/p/AcASZ4smZHcFFk
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- TC Trustcenter Class 3 CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- Thawte Server CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>
MIIDEzCCAnygAwIBAgIBATANBgkqhkiG9w0BAQQFADCBxDELMAkGA1UEBhMCWkEx
FTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMR0wGwYD
VQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UECxMfQ2VydGlmaWNhdGlv
biBTZXJ2aWNlcyBEaXZpc2lvbjEZMBcGA1UEAxMQVGhhd3RlIFNlcnZlciBDQTEm
MCQGCSqGSIb3DQEJARYXc2VydmVyLWNlcnRzQHRoYXd0ZS5jb20wHhcNOTYwODAx
MDAwMDAwWhcNMjAxMjMxMjM1OTU5WjCBxDELMAkGA1UEBhMCWkExFTATBgNVBAgT
DFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMR0wGwYDVQQKExRUaGF3
dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNl
cyBEaXZpc2lvbjEZMBcGA1UEAxMQVGhhd3RlIFNlcnZlciBDQTEmMCQGCSqGSIb3
DQEJARYXc2VydmVyLWNlcnRzQHRoYXd0ZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBANOkUG7I/1Zr5s9dtuoMaHVHoqrC2oQl/Kj0R1HahbUgdJSGHg91
yekIYfUGbTBuFRkC6VLAYttNmZ7iagxEOM3+vuNkCXDF/rFrKbYvScg71CcEJRCX
L+eQbcAoQpnXTEPew/UhbVSfXcNY4cDk2VuwuNy0e982OsK1ZiIS1ocNAgMBAAGj
EzARMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEEBQADgYEAB/pMaVz7lcxG
7oWDTSEwjsrZqG9JGubaUeNgcGyEYRGhGshIPllDfU+VPaGLtwtimHp1it2ITk6e
QNuozDJ0uW8NxuOzRAvZim+aKZuZGCg70eNAKJpaPNW15yAbi8qkq43pUdniTCxZ
qdq5snUb9kLy78fyGPmJvKP/iiMucEc=
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- Thawte Premium Server CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- Verisign Class 3 CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<!-- Versign Class 3 Public Primary CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- VeriSign International Server CA - Class 3 (new) -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- VeriSign International Server CA - Class 3 -->
				<ds:X509Data>
					<ds:X509Certificate>
MIIDgzCCAuygAwIBAgIQJUuKhThCzONY+MXdriJupDANBgkqhkiG9w0BAQUFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsT
LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw
HhcNOTcwNDE3MDAwMDAwWhcNMTExMDI0MjM1OTU5WjCBujEfMB0GA1UEChMWVmVy
aVNpZ24gVHJ1c3QgTmV0d29yazEXMBUGA1UECxMOVmVyaVNpZ24sIEluYy4xMzAx
BgNVBAsTKlZlcmlTaWduIEludGVybmF0aW9uYWwgU2VydmVyIENBIC0gQ2xhc3Mg
MzFJMEcGA1UECxNAd3d3LnZlcmlzaWduLmNvbS9DUFMgSW5jb3JwLmJ5IFJlZi4g
TElBQklMSVRZIExURC4oYyk5NyBWZXJpU2lnbjCBnzANBgkqhkiG9w0BAQEFAAOB
jQAwgYkCgYEA2IKA6NYZAn0fhRg5JaJlK+G/1AXTvOY2O6rwTGxbtueqPHNFVbLx
veqXQu2aNAoV1Klc9UAl3dkHwTKydWzEyruj/lYncUOqY/UwPpMo5frxCTvzt01O
OfdcSVq4wR3Tsor+cDCVQsv+K1GLWjw6+SJPkLICp1OcTzTnqwSye28CAwEAAaOB
4zCB4DAPBgNVHRMECDAGAQH/AgEAMEQGA1UdIAQ9MDswOQYLYIZIAYb4RQEHAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL0NQUzA0BgNV
HSUELTArBggrBgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEAQYKYIZIAYb4RQEI
ATALBgNVHQ8EBAMCAQYwEQYJYIZIAYb4QgEBBAQDAgEGMDEGA1UdHwQqMCgwJqAk
oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA0GCSqGSIb3DQEB
BQUAA4GBAAgB7ORolANC8XPxI6I63unx2sZUxCM+hurPajozq+qcBBQHNgYL+Yhv
1RPuKSvD5HKNRO3RrCAJLeH24RkFOLA9D59/+J4C3IYChmFOJl9en5IeDCSk9dBw
E88mw0M9SR2egi5SX7w+xmYpAY5Okiy8RnUDgqxz6dl+C2fvVFIa
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			  <!-- EPFL CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- GTE CyberTrust Global Root -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- Cybertrust Educational CA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- QuoVadis Root Certification Authority -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- QuoVadis Root CA 2 -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			<!-- QuoVadis Global SSL ICA -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- AAI Test CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- Deutsche Telekom Root CA 2 -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- DFN-Verein PCA Global - G01  -->
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- DFN-Verein-GS-CA - G02	 -->
				<ds:X509Data>
					<ds:X509Certificate>
MIIE4DCCA8igAwIBAgIECc2lcjANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJE
RTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEkMCIGA1UE
AxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4XDTA3MDExNzEzNDMwMFoX
DTE4MTEzMDIyMDAwMFowXjELMAkGA1UEBhMCREUxEzARBgNVBAoTCkRGTi1WZXJl
aW4xGTAXBgNVBAsTEEdlc2NoYWVmdHNzdGVsbGUxHzAdBgNVBAMTFkRGTi1WZXJl
aW4tR1MtQ0EgLSBHMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc
XD9Q+mP0fT565l0iheYxxjLBdVV+QRL3cuTF+G4zJCWXQqLcgi/Gzgx/vA8tG6R9
NoPOmJjqnh8M52d05CupHiVCguWna5BiMSNnfy8qSyblzxpu7Tlg4mW10IoYHeCt
Dh4c1rFwpy/pj09fUJOvBuqLBrKr86UtFoSYV4GO/0iufVFIA88LqzoR0rvTJBlN
/d0t+4oeWHN2Wu+8QRlKHKxriKRnLHkJQWY8bs+qKoOq+Ant0DmafzlCLGQzc4UG
u3kGnPRXqUZdTFStY0DZLH7CLwg6D5ab/5F+gL1jOp1+G8bCAkjjmVoJbqgDDCVM
Vo5ZkHPVad145xDgC/9tAgMBAAGjggGoMIIBpDAPBgNVHRMBAf8EBTADAQH/MAsG
A1UdDwQEAwIBBjAdBgNVHQ4EFgQUeaJiL87xBjlS53ZtYsfem2p1S0kwHwYDVR0j
BBgwFoAUSbfGz+g9H3/qRHsTKffxCnA+3mQwFAYDVR0RBA0wC4EJY2FAZGZuLmRl
MIGIBgNVHR8EgYAwfjA9oDugOYY3aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9i
YWwtcm9vdC1jYS9wdWIvY3JsL2NhY3JsLmNybDA9oDugOYY3aHR0cDovL2NkcDIu
cGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY3JsL2NhY3JsLmNybDCBogYI
KwYBBQUHAQEEgZUwgZIwRwYIKwYBBQUHMAKGO2h0dHA6Ly9jZHAxLnBjYS5kZm4u
ZGUvZ2xvYmFsLXJvb3QtY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MEcGCCsGAQUF
BzAChjtodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9j
YWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAwO6OKf2W64fjqcq+
XGhZC2TFU5aP9s17kHHNLD1GYz2XZ7dds1ZBSfYU35s3in0euRd3g8JoF+qNopxK
fCpgz6kaKOwXanphqQTukoz8/IfsqYQTm0xBUjAzRZe0sMnfcfZsSn38rJNBe8fU
REcchg6zbd6Qpkf87JW+lKG4oHUE+qlnATNx2uV/Q1aT1ptwFBTAGfL66Dm2Jfog
arQ38HHKV63PwKGL92IDmdAAPvmHHkHdK47BoRCG+V7rG2n5HAopC566t0RIxDt2
m0Wg9BKiwfP2RUrz3STVAxohyXoGyMU8MaTeGiB7NIH3lo37nqPO+y1XfBFjz90H
AaRthg==
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- DFN-Verein PCA Grid - G01 -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
				<!-- DFN-Verein Server CA Grid - G01  -->
				<ds:X509Data>
					<ds:X509Certificate>
MIIFODCCBCCgAwIBAgIEBuzALjANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJE
RTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEiMCAGA1UE
AxMZREZOLVZlcmVpbiBQQ0EgR3JpZCAtIEcwMTAeFw0wNTA3MDcxNDU2MzJaFw0w
OTA3MDcxNDU2MzJaMF4xCzAJBgNVBAYTAkRFMRMwEQYDVQQKEwpERk4tVmVyZWlu
MRAwDgYDVQQLEwdERk4tUEtJMSgwJgYDVQQDEx9ERk4tVmVyZWluIFNlcnZlciBD
QSBHcmlkIC0gRzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReN
WWGIRPuWOgINGSGb3+G7lJdOpjcxFyBI9OIndTl2BJu2xT3gGtarc1a/XWK1ocvB
GzuJKAGEISCLaiXvrf7fr2UXt5nIIEnLyb2QJpEbfX3bTNCjzf4gMsYuliQH4/zK
pjtfZ43E/rFusBCEZ43C3CzgJ3Zi++vE57/saWuuvaihuBk62SDzi21g6I2eXOOR
I9KYZ3meNTD6vEWptSJ0/YoGs3g9ah1kdBollypLxKccSaBdJLiri75XSuCyj9G4
mUjxpgaKo4DDDJsyJl4+NYjiN2di63V1jq0ZkPVxL/CNV09Kb4gOluiHjuziEqDb
w3lMV/lN44aq51bbVQIDAQABo4ICAjCCAf4wHQYDVR0OBBYEFIwRYocmqRqpiTXv
ooVMH8yVUpvIMB8GA1UdIwQYMBaAFJbs3K2aw/5Qozwi5T3Cxf/K2SLGMA8GA1Ud
EwEB/wQFMAMBAf8wgcEGA1UdHwSBuTCBtjBZoFegVYZTaHR0cDovL2NkcDEucGNh
LmRmbi5kZS9kZm4tcGtpL2NlcnRpZmljYXRpb24veDUwOS9ncmlkL2cxL2RhdGEv
Y3Jscy9yb290LWNhLWNybC5jcmwwWaBXoFWGU2h0dHA6Ly9jZHAyLnBjYS5kZm4u
ZGUvZGZuLXBraS9jZXJ0aWZpY2F0aW9uL3g1MDkvZ3JpZC9nMS9kYXRhL2NybHMv
cm9vdC1jYS1jcmwuY3JsMIHWBggrBgEFBQcBAQSByTCBxjBhBggrBgEFBQcwAoZV
aHR0cDovL2NkcDEucGNhLmRmbi5kZS9kZm4tcGtpL2NlcnRpZmljYXRpb24veDUw
OS9ncmlkL2cxL2RhdGEvY2VydHMvcm9vdC1jYS1jZXJ0LmNydDBhBggrBgEFBQcw
AoZVaHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tcGtpL2NlcnRpZmljYXRpb24v
eDUwOS9ncmlkL2cxL2RhdGEvY2VydHMvcm9vdC1jYS1jZXJ0LmNydDAOBgNVHQ8B
Af8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAK3yyAeeWrMiXcnT1WyogEeXRl2s
jRHPow0PuWTvEvM+jFUAkXpy0B8V2lQvkMqNdJTLfxcb3d5i3u6r9nG8Bp80fHTY
TfA9+mkI078FYiwS2gtva96M7kJG/6nwii9zCJvekwXWJa1YZCgPMTpkVD8XPKVY
13PM7nHvN9vT6oQQheqJrIVkDt6WhgOIsReHlPRZtPQn4MSlqO3dGkj+Q9xenkCm
SeAlj0M7HR/GDgNOjPxPDn304ZuKrDQ6yKrCQC/xTttIzLPI8BUqqbehlJYWBBJv
AuNN9CgEyFSQGGj+VkHXFSxSio2O3j9cUtkxrzwUdoELnj1bEkerNOWjqeA=
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
			<!-- HES-SO CA -->
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>
MIIDLTCCAhWgAwIBAgIIO9+pFW6Ig64wDQYJKoZIhvcNAQELBQAwJDEQMA4GA1UE
AwwHQWRtaW5DQTEQMA4GA1UECgwHc3ZjSW5mbzAeFw0wODA2MTMwOTA3MzhaFw0x
ODA2MTEwOTA3MzhaMCQxEDAOBgNVBAMMB0FkbWluQ0ExEDAOBgNVBAoMB3N2Y0lu
Zm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QdxUYkxsClntN6oG
NWEzcbsbTtHa5COVw8Zriho+cbd9zyd2tPkOVcbWZuM0VCPmTTkXR/depHrJ6xll
PjNrpOkjEMIeZ6D2lcup6R9hY6akdLvr3NqbolSIpNoM5Hl1guiNqDakWlaJNVc3
C7IBnU45rFIN7TraPXO4IywrwxPKTvClna6T9AVrqksqnGTLDAfudvz0A3xvi2hA
Vy4UiQuyScT0uLpu35vVVDRUsbc8uqt5cVyWTGUT1RK/BWjRbiLY25VtYvV++kSM
r6Rw7KFB5Kq4m4CPUqQrnzQlWnVCBGRtcP5fK/jRqY/nLFg7lns5cJq1IoKMqDc/
VvKBAgMBAAGjYzBhMB8GA1UdIwQYMBaAFAPkSeAiV3Q6A4VkbolkJ5JzGsJtMA4G
A1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUA+RJ4CJXdDoDhWRuiWQnknMawm0wDwYD
VR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAJyYt+5gJTJFrEMTdHbu/
hQ0xoDEOveoZayU16+DhbR3Y9K3tNeQdF98QaX9FWwzcyVprPE+QRSQkTQ/6GveH
QhD/Y1n1tzR8cirD+R4RpEsCsWqjxp9rC+DGJY4rc7q0wuTGqkQliX221ItjP1Dn
zr0kecFnWqYXQVpV4AiGwC6oBxcmD66EJJfExRnlog3GUL+cTcAA1gnBdcpiFTTY
JxjydrhnsUco+uTT/3qJMSl222zwP9xVw+I0+nd9tziUjuDYxYYxhz19PmwUk2Ij
pz0wu3McQkDdKnJCJOwT3P/fpMgGiUIZ8YhOTlsjMe06UHFet+sp71Sy+r9xuab4
8A==
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>

		</shibmd:KeyAuthority>
	</Extensions>
	<!-- Identity Provider Definitions -->

	<!-- Université de Fribourg Test Home Organization -->
	<EntityDescriptor entityID="https://testidp.unifr.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test.unifr.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>testidp.unifr.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDIDCCAgigAwIBAgIJAJTgSuQp5wLyMA0GCSqGSIb3DQEBBQUAMBsxGTAXBgNV
BAMTEHRlc3RpZHAudW5pZnIuY2gwHhcNMDkwNjI5MTMyODMyWhcNMTIwNjI5MTMy
ODMyWjAbMRkwFwYDVQQDExB0ZXN0aWRwLnVuaWZyLmNoMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAt20TF5AI221MuA09aYt+3IQeS2/afZnxvbfJBA5I
iA+Or/gEOqOUk8yxtBnb6cbPH/MN+GlWzUD4jx1+avwRF5jlPQ/UsWbDY9Kfgp1g
F7rlHkuKqE2RHDALE9dYGHGO4jMCB/ntWoe8jea7Vj+8aT64IhPdl9A8kWicYhoU
/QlbU1/Sh9re9Bs0DPqw6wEq20h0Z/U2ID01sQlcAL75mxo/NN8ZhVSjrYRVTRvs
7uSN2hCUOvPKK1OaYsQvYPhr8MIQ/QQ+/FwpNqjJR0GsJsjm4EX7dt64XuhgXrQV
vW3PoJki8njtG7gAeryoP0/jQ8BVTr6aan6Ylpvp0BYYKwIDAQABo2cwZTBEBgNV
HREEPTA7ghB0ZXN0aWRwLnVuaWZyLmNohidodHRwczovL3Rlc3RpZHAudW5pZnIu
Y2gvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFPJMgcIByOK6sI8U2I2vAV9XKZ59
MA0GCSqGSIb3DQEBBQUAA4IBAQBIYwViCIC7KXZ6Cj0f6mR5NLYjVyvYuGE3qJZ6
p4GnkRgKBcb/iKbKWViec2/OoaLZVIJDZnKsINYTHqKx+RFkZiwo982hlvsBEJjH
5kpiDv03lgnTENsNTF6ESvIcyB9cOoSQ55PIMCFalg31p4fvQzj/Od8SM6kDrb/E
B1xvtHhpqHcKBxce5bSAHzU0yezys+TjLMCs77ruYtdLUVCeTPofGOiHomOmqiZx
hu2k8iCbPHfMFoYOJxsOGKaudx6W/NxY7nxmwELlxf16MJnsFId/dPAIDPYxEwW8
GrHX00wpDDqiYS65R1x9E+qdOWrw0xNX09+RM9r0f/pPxwVi
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidp.unifr.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidp.unifr.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testidp.unifr.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testidp.unifr.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://testidp.unifr.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://testidp.unifr.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>testidp.unifr.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidp.unifr.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidp.unifr.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">Université de Fribourg Test Home Organization</OrganizationName>
			<OrganizationDisplayName xml:lang="en">Université de Fribourg Test Home Organization</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.test.unifr.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- SWITCH AAI Test Home Org -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:dukono.switch.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">aaitest.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dukono.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://dukono.switch.ch:8443/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://dukono.switch.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dukono.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://dukono.switch.ch:8443/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">SWITCH AAI Test Home Org</OrganizationName>
			<OrganizationDisplayName xml:lang="en">SWITCH AAI Test Home Org</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- PHBern - Pädagogische Hochschule Bern -->
	<EntityDescriptor entityID="https://aai2.phbern.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test-phbern.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai2.phbern.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai2-aa.phbern.ch/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai2-aa.phbern.ch/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai2.phbern.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai2.phbern.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai2.phbern.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai2.phbern.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai2-aa.phbern.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIExjCCA66gAwIBAgICAMswDQYJKoZIhvcNAQEFBQAwdTELMAkGA1UEBhMCQ0gx
DzANBgNVBAcTBlp1cmljaDETMBEGA1UEChMKU1dJVENIIEFBSTEMMAoGA1UECxMD
QUFJMRQwEgYDVQQDEwtBQUkgVGVzdCBDQTEcMBoGCSqGSIb3DQEJARYNYWFpQHN3
aXRjaC5jaDAeFw0wODA0MDMwNzIxMzlaFw0wOTA0MDMwNzIxMzlaMIG3MQswCQYD
VQQGEwJDSDENMAsGA1UECBMEQmVybjENMAsGA1UEBxMEQmVybjEmMCQGA1UEChMd
UGFlZGFnb2dpc2NoZSBIb2Noc2NodWxlIEJlcm4xKDAmBgNVBAsTH1plbnRydW0g
ZnVlciBCaWxkdW5nc2luZm9ybWF0aWsxGjAYBgNVBAMTEWFhaTItYWEucGhiZXJu
LmNoMRwwGgYJKoZIhvcNAQkBFg1hYWlAcGhiZXJuLmNoMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEApvNfQK3SvUI59jJ3ya+xU1/mfYqWCC2+fUmpmXTJ
86nrd8H6SEGTnckhaVdzHPmHh1khr3q8FKXeP0PHIPCeoGswMKGL81Te9vl/TPjQ
X1t4yXzR8hod8TV1Oe/QIVEQGUFVLWWXxi6Aaeh59D/wXvKv3t2T5nHjBFiMluaR
HT42I50chJ0fJjILEmtPMU4k3818Y3euQgEiuWg0cvhGDVV3OTSTJFxOFt7vVdY3
on9f1PuTCIDP2OBTKQy0DLfvJ7P7Yed34n7HKEJey6TiQ6hK9HXptlE1RC9/F0q7
7Sv0P9eQqh1XTa9hBOHSLnDaA7sjVTRx+6RRZWVoiAMmXQIDAQABo4IBGzCCARcw
CQYDVR0TBAIwADBJBglghkgBhvhCAQ0EPBY6R2VuZXJhdGVkIGZvciBBQUkgVGVz
dCBGZWRlcmF0aW9uIGh0dHA6Ly93d3cuc3dpdGNoLmNoL2FhaTAdBgNVHQ4EFgQU
Orx5NFvLMNcLFhLijXTEZfhY918wgZ8GA1UdIwSBlzCBlIAUBUfEhodT+g8w0FKl
ofBLJmt5UkOheaR3MHUxCzAJBgNVBAYTAkNIMQ8wDQYDVQQHEwZadXJpY2gxEzAR
BgNVBAoTClNXSVRDSCBBQUkxDDAKBgNVBAsTA0FBSTEUMBIGA1UEAxMLQUFJIFRl
c3QgQ0ExHDAaBgkqhkiG9w0BCQEWDWFhaUBzd2l0Y2guY2iCAQAwDQYJKoZIhvcN
AQEFBQADggEBAKM8vu+Bmj9fCmNIG8HfUk1OFKjxh6R8Hns+jkaqgf6bd2sHBgR9
61+ElaCtC37hvTXB/sZemlXgAM0IF4R53dJFX53O64QL/mEC7ozP1xzDDZDqDQzD
2vPTm0wELe+GpxPTALt0fGPEfA2wkuS6PsQDnN8cONWoSL17SbgH69MMZjdX+J2s
jr3ZHe0bedrw0OPeI2yO6w0cItB3YgeRBMKdYzN/kaP0gOSfj4CVt1pupi4eYN3O
Q0WFB3xewVVRQd3SxIjsW4gSFOqP3bod2WYrpSkUOK8uuA31bcwgb2ooI0npNSHs
G4Lq2TyvzsjHhIDf1o6+YyZrCd8yaw4MoQY=
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai2-aa.phbern.ch/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai2-aa.phbern.ch/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="de">PHBern - Pädagogische Hochschule Bern</OrganizationName>
			<OrganizationDisplayName xml:lang="de">PHBern - Pädagogische Hochschule Bern</OrganizationDisplayName>
			<OrganizationURL xml:lang="de">http://www.test-phbern.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- AAI Test Home Org (internal) [kaba.switch.ch] -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:kaba.switch.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">kaba.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>CN=kaba.switch.ch, O=Switch - Teleinformatikdienste fuer Lehre und Forschung, C=CH</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://kaba.switch.ch/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://kaba.switch.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>CN=kaba.switch.ch, O=Switch - Teleinformatikdienste fuer Lehre und Forschung, C=CH</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://kaba.switch.ch:8443/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">AAI Test Home Org (internal) [kaba.switch.ch]</OrganizationName>
			<OrganizationDisplayName xml:lang="en">AAI Test Home Org (internal) [kaba.switch.ch]</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- Universita della Svizzera Italiana -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:unisi.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test.unisi.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tlogin.unisi.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://tlogin.unisi.ch:8443/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://tlogin.unisi.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tlogin.unisi.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://tlogin.unisi.ch:8443/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="it">Universita della Svizzera Italiana</OrganizationName>
			<OrganizationDisplayName xml:lang="it">Universita della Svizzera Italiana</OrganizationDisplayName>
			<OrganizationURL xml:lang="it">http://www.test.unisi.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- eduGAIN Bridging Element, development -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:tengger.switch.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">tengger.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tengger.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://tengger.switch.ch/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://tengger.switch.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tengger.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://tengger.switch.ch/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">eduGAIN Bridging Element, development</OrganizationName>
			<OrganizationDisplayName xml:lang="en">eduGAIN Bridging Element, development</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- INSTRUCT AG -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:casus.net">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">casus.net</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ssl.casus.net</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ssl.casus.net/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ssl.casus.net/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ssl.casus.net</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ssl.casus.net/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">INSTRUCT AG</OrganizationName>
			<OrganizationDisplayName xml:lang="en">INSTRUCT AG</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.casus.net</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- EduGAIN Bridging Element -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">edugain.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>edugain-login.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://edugain-login.switch.ch/shibboleth-idp/Artifact" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://edugain-login.switch.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>edugain-login.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://edugain-login.switch.ch/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">EduGAIN Bridging Element</OrganizationName>
			<OrganizationDisplayName xml:lang="en">EduGAIN Bridging Element</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- Universität Bern - Test-Homeorg -->
	<EntityDescriptor entityID="https://aai-testidp.unibe.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">aai-testidp.unibe.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-testidp.unibe.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-testidp.unibe.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-testidp.unibe.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-testidp.unibe.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-testidp.unibe.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-testidp.unibe.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-testidp.unibe.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-testidp.unibe.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-testidp.unibe.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-testidp.unibe.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">Universität Bern - Test-Homeorg</OrganizationName>
			<OrganizationDisplayName xml:lang="en">Universität Bern - Test-Homeorg</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.aai-testidp.unibe.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- AAI Shibboleth 2.x Test IdP -->
	<EntityDescriptor entityID="https://dieng.switch.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">dieng.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dieng.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://dieng.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dieng.switch.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dieng.switch.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://dieng.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dieng.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIEvTCCA6WgAwIBAgILAQAAAAABHqepjOowDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA5
MDEwNTE1MzgwM1oXDTExMDEwNTE1MzgwM1owaTELMAkGA1UEBhMCQ0gxQDA+BgNV
BAoTN1N3aXRjaCAtIFRlbGVpbmZvcm1hdGlrZGllbnN0ZSBmdWVyIExlaHJlIHVu
ZCBGb3JzY2h1bmcxGDAWBgNVBAMTD2RpZW5nLnN3aXRjaC5jaDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALMJbhovecMB4YSzWi3dWIf2cdFy3kNakMAp
ulfqbcx1jJaMSLUPu9PcjrVhV0B6DRq7fB/rxD0Dd18T5W5kE5aq8qFY1orI6LqQ
NztnsDN5CLls7y5/2pTajK4roYdRab2GU9x1Lth9kGakOUgBlPvluLfW9lF5h1qz
LI0CHATHNq5MZqlrcPRZt5fUIiwofOpXLu6+SIG49iBLwMoupwUxC53tgmWTeu7l
AS8/QGW4xLYdcGc+1cwl7BhLb025QKVK2rPqy57C4ZUm/duBvV9yTiSYQDpMDMWL
9RIUj40fSV31RncH26mbd/1FdVZzPC04z0uSk9v2Au8VnbjmIfkCAwEAAaOCAW4w
ggFqMFAGA1UdIARJMEcwRQYHKoZIsT4BADA6MDgGCCsGAQUFBwIBFixodHRwOi8v
d3d3Lmdsb2JhbHNpZ24ubmV0L3JlcG9zaXRvcnkvY3BzLmNmbTAOBgNVHQ8BAf8E
BAMCBaAwHwYDVR0jBBgwFoAUZWWjPdc7EaMKByU3yUJKW3Z3UOEwHQYDVR0OBBYE
FLKrUWO0oHsogG5ROe6m1xsFp360MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9j
cmwuZ2xvYmFsc2lnbi5uZXQvZWR1Y2F0aW9uYWwuY3JsME8GCCsGAQUFBwEBBEMw
QTA/BggrBgEFBQcwAoYzaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLm5ldC9jYWNl
cnQvZWR1Y2F0aW9uYWwuY3J0MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAaBgNVHREEEzARgg9kaWVuZy5zd2l0Y2guY2gwDQYJKoZIhvcNAQEFBQADggEB
AHtGEd3Am1Bl1P04PPpGGK41yf+sVXWOkOwgMUyH1KG8ASYBRmSmI3+xnunvhLss
A/Vy0Ti6LD4Vg6vFO5BlQB8GFphyWcx+kiiqKNJ8IMXgI8RWUrH+6iYwjz3vLwz0
FwdY+3d9+SUR5A8L8m+2GPSOy14o1Aezfv79c9KS2Rn4i7sAll6XiHt/9o4pn6KR
5JtGScEmA3NoF+PM4gY/rA7ENDXesH5awDTf5qGbj8W/UfF6Ix73MEbxGyNRflIc
ua/0ooparWzDBsrG/3O3BpgtlgvKqD5nl9t8WDNsJnPslWElw7nhOzgXm0t+kwla
HUqtfqlJbzKrQtTpf+Rvwb4=
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://dieng.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">AAI Shibboleth 2.x Test IdP</OrganizationName>
			<OrganizationDisplayName xml:lang="en">AAI Shibboleth 2.x Test IdP</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- SWITCH Shib2 Test (KB) -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:blupblup.switch.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">blupblup.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>blupblup.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://blupblup.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://blupblup.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>blupblup.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://blupblup.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">SWITCH Shib2 Test (KB)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">SWITCH Shib2 Test (KB)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- SimpleSAML Test Identity Provider -->
	<EntityDescriptor entityID="https://ebulobo.switch.ch/idp/simplesaml">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ebulobo.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ebulobo.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ebulobo.switch.ch/simplesaml/saml2/idp/SingleLogoutService.php"></SingleLogoutService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ebulobo.switch.ch/simplesaml/saml2/idp/SSOService.php"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ebulobo.switch.ch/simplesaml/shib13/idp/SSOService.php"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ebulobo.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIE3jCCA8agAwIBAgICD7owDQYJKoZIhvcNAQEFBQAwazELMAkGA1UEBhMCQk0x
GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHzAdBgNVBAsTFnd3dy5xdW92YWRp
c2dsb2JhbC5jb20xIDAeBgNVBAMTF1F1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBMB4X
DTA5MDEyMjEwMzg1NloXDTEyMDEyMjEwMzg1NlowXjELMAkGA1UEBhMCQ0gxEDAO
BgNVBAgTB1p1ZXJpY2gxEDAOBgNVBAcTB1p1ZXJpY2gxDzANBgNVBAoTBlNXSVRD
SDEaMBgGA1UEAxMRZWJ1bG9iby5zd2l0Y2guY2gwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC94Uyr8fcL6cAzgCIfsjX2YFzndZornB2uYyYKmiUJOw46
t7kDk+4c7KQDFzcG+AmTdLRPflcIJZ+w3mUCtbmuUNgyA3J7l/PX9CmjU3l6CbRT
dPfGdS4GAdnHlDVez9MM+yDoyPXHcCKkY6+wX9BpmfzmYNXXquN9vy/NbwYGEkxJ
ghLRrRJKTKY2eyVVM1fYnCXwDp1pD/OyQxPNcC9AiplJZZ32Lu7UjCnSouD3IL5I
9ePCJ7yHVSCpqVT0VczHKUk3Xm/x4B2oZdIPEiIs78o0Nt7gvn8uxDosbuuTu/HQ
riQNq5B4Iy12WGdw5k/RUMOpnt8Rod/eh/PiKhY/AgMBAAGjggGXMIIBkzB0Bggr
BgEFBQcBAQRoMGYwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xv
YmFsLmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFs
LmNvbS9xdnNzbGljYS5jcnQwHAYDVR0RBBUwE4IRZWJ1bG9iby5zd2l0Y2guY2gw
UQYDVR0gBEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0cDov
L3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFDJN
oU/q8K6Ztu6bByyECBFQi+J+MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
cXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsaWNhLmNybDAdBgNVHQ4EFgQU3Ud05JHH
EaGmTzlhJvZXsq/jJVIwDQYJKoZIhvcNAQEFBQADggEBAFhofh+BJRcEHUqDaAGt
A5Fuq5a0Jh3FAYdFqMdFBolUBJiyn1GomTMgGwQHA8Dcq/WGGgrJx/emggmx+qm2
3PYfvuGnFr5vxcHWzs6frANkTm4cUnjM44Jz6DSyRbp0JS8cXoxB46MUgcM5zSrJ
EJkfAm1YznY6pBhBgKd7HgixyELr6+0sHHEPcfmnFwwXiKuXP9wbX40VWHDyKFzR
/nrNcuK2qCNS9Xb7nVzSJT8QNKL0LsWlXFCgLlTMFVrLKGrS6WfyzdOsYJpQJQCe
fnh9OIM7Sez3tKIHN/HO/6uO5sjBRINOEsxIlvUOGRsVKxFlth0gnU8WqSW/SS3A
oec=
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ebulobo.switch.ch/simplesaml/shib2/idp/AAService.php"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ebulobo.switch.ch/simplesaml/shib13/idp/AAService.php"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">SimpleSAML Test Identity Provider</OrganizationName>
			<OrganizationDisplayName xml:lang="en">SimpleSAML Test Identity Provider</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- HES-SO Test IdP -->
	<EntityDescriptor entityID="https://aai-logon-test.hes-so.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">aai-logon-test.hes-so.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon-test.hes-so.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon-test.hes-so.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon-test.hes-so.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-logon-test.hes-so.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-logon-test.hes-so.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-logon-test.hes-so.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-logon-test.hes-so.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon-test.hes-so.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon-test.hes-so.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon-test.hes-so.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="fr">HES-SO Test IdP</OrganizationName>
			<OrganizationDisplayName xml:lang="fr">HES-SO Test IdP</OrganizationDisplayName>
			<OrganizationURL xml:lang="fr">http://www.aai-logon-test.hes-so.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- PSI - Paul Scherrer Institut -->
	<EntityDescriptor entityID="https://achat.psi.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">psi.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>achat.psi.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://achat.psi.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://achat.psi.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://achat.psi.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://achat.psi.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://achat.psi.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://achat.psi.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>achat.psi.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDGzCCAgOgAwIBAgIUJ667ZRtAyPTaPrFLRwR+M7VoYd8wDQYJKoZIhvcNAQEF
BQAwFzEVMBMGA1UEAxMMYWNoYXQucHNpLmNoMB4XDTA5MDIxMDE1NDQxMloXDTI5
MDIxMDE1NDQxMlowFzEVMBMGA1UEAxMMYWNoYXQucHNpLmNoMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIIE+ggNxT/IeG7uqiJF1MLCaeyX9Y3dffb/
Yf5vygUgpfZ4/jYVo8cMmYfV5aemfeo1G7OBXYveLNF3fSi2eaGC72lCfYtH0Yam
ioVrj7CqnWcL1x9MEmO0afOZuxfEPGCzqcf9dRFWzYlyHxLLBJs1iCeIsV2CrTRt
iGenfKKwsTsvrKpCVakCKKPBQ3yW7HL1DG+K1+VIQuJFO63Tnq5ZrzTE4st64DoL
x4i2r9HZMbeo8qsvuIo2XdvnvfJWEuRVS16IdUjFx62o+kyLDItWD8SgAYkUgwBG
3P2ac3KpZIpdZaThJNet4A/kdLI2cVtuT2ktuKtpNhG1zKD0UwIDAQABo18wXTA8
BgNVHREENTAzggxhY2hhdC5wc2kuY2iGI2h0dHBzOi8vYWNoYXQucHNpLmNoL2lk
cC9zaGliYm9sZXRoMB0GA1UdDgQWBBRFcNb+eOYXyYzEWInj92HoIc/DrjANBgkq
hkiG9w0BAQUFAAOCAQEAaJnuRGVtOA4elB521DDBIvL77pZhl1ZumVl3ubLOhBNI
jJ5EFw8R2fB4IfbBVuzBYTtvVMvlXY6r+o57LpWchZL63ukjiz+YarCVCZaxDfMJ
pTjXFtlsALFhDBvnF2CfK5u56sjNb6pxWVVJA9PdTrc7LHbfg8P4n6WIcJnbw8Be
USC3eOGdi6P8XVPnhErzQeIBhFYvSiJbtSF8Ylome31evRTdRs9jHPCa+yUiFJAH
NuaZthgh8u/VYfP/MWly1fM5WGkB/175toLiJi+PwV3dn7kh2+uhOEf0QkdY66Bd
0YGjYCBJtY7i0sfTgvRhd9UtiZ3iXCWtneEC244MgQ==
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://achat.psi.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://achat.psi.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="de">PSI - Paul Scherrer Institut</OrganizationName>
			<OrganizationDisplayName xml:lang="de">PSI - Paul Scherrer Institut</OrganizationDisplayName>
			<OrganizationURL xml:lang="de">http://ait.web.psi.ch/us/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- SWITCHaai Test IdP (gamalama) -->
	<EntityDescriptor entityID="https://gamalama.switch.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">gamalama.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://gamalama.switch.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://gamalama.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://gamalama.switch.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://gamalama.switch.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://gamalama.switch.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://gamalama.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://gamalama.switch.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://gamalama.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">SWITCHaai Test IdP (gamalama)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">SWITCHaai Test IdP (gamalama)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.gamalama.switch.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- Test Virtual Home Organization -->
	<EntityDescriptor entityID="https://aai-logon.test.vho-switchaai.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test.vho-switchaai.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon.test.vho-switchaai.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon.test.vho-switchaai.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon.test.vho-switchaai.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-logon.test.vho-switchaai.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-logon.test.vho-switchaai.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-logon.test.vho-switchaai.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-logon.test.vho-switchaai.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon.test.vho-switchaai.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon.test.vho-switchaai.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon.test.vho-switchaai.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">Test Virtual Home Organization</OrganizationName>
			<OrganizationDisplayName xml:lang="en">Test Virtual Home Organization</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.test.vho-switchaai.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- AAI Demo Identity Provider (Shibboleth 2.0) -->
	<EntityDescriptor entityID="https://aai-demo-idp.switch.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">aai-demo-idp.switch.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-demo-idp.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-demo-idp.switch.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-demo-idp.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/Redirect/SLO"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/POST/SLO"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/SOAP/SLO"></SingleLogoutService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-demo-idp.switch.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-demo-idp.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-demo-idp.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-demo-idp.switch.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-demo-idp.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">AAI Demo Identity Provider (Shibboleth 2.0)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">AAI Demo Identity Provider (Shibboleth 2.0)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.aai-demo-idp.switch.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- FHNW-TEST - Fachhochschule Nordwestschweiz -->
	<EntityDescriptor entityID="https://aai-logon.test.fhnw.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test.fhnw.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon.test.fhnw.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDRDCCAiygAwIBAgIVAKvaFIcE+pCsc8oyeeh2K28c9S2xMA0GCSqGSIb3DQEB
BQUAMCExHzAdBgNVBAMTFmFhaS1sb2dvbi50ZXN0LmZobncuY2gwHhcNMDkwOTA4
MDgwNTAwWhcNMTIwOTA4MDgwNTAwWjAhMR8wHQYDVQQDExZhYWktbG9nb24udGVz
dC5maG53LmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl9HfaaE
1jJo0KnnEK1UO+GXWcQTEEEu3QxXTNiPKu+pRpUSyWfD77jr8PdArXQ2QFv+4kTy
cZV2xD2abwSViDN/zVC0EGJ9VvyIwmX3STL4ROJ2ISb64Gtzcar3NHhyPJYIcluF
5w9qAm6n/NHyLnz9wNFrl+zFeo8uXJwTj8x9pB9TBZ/1b/pYawSaZKhhsOtkYL/P
jUhUPD69NR5f2kpTvG+4KsdoksT1mF8hOHDE6hsM+J/oDF+/gjAFgizx4cvjAgLw
BsMUemH7urjOvp1+ForKm6uFOmNskJoCy2sq6GqTaINUlJeI+kBLwnA+u2YV8DEX
OlLBcUTai/jXVQIDAQABo3MwcTBQBgNVHREESTBHghZhYWktbG9nb24udGVzdC5m
aG53LmNohi1odHRwczovL2FhaS1sb2dvbi50ZXN0LmZobncuY2gvaWRwL3NoaWJi
b2xldGgwHQYDVR0OBBYEFKYipkzdfc/tQsOjiRKNX8Oi5wXrMA0GCSqGSIb3DQEB
BQUAA4IBAQDADvPtiZ/t6ORnsDUD/R4UjWwzKefn4eI062Rv++0qosT/SiT3/uq6
0F1T1NG6tJdTUFde6SmUWZ3IXCH8aG6IPtoO7bKrVB3WaNY33A0Of0olpbl8+zhz
aldwuQ+rPBNwH4Li3KBEbNsHPkfNFOyFtRDAvYqydu5KC2vhQ0voL/NCAwjX929/
TelJM2rIVtsG0x5Kt+UJXWfT2kWSTtw87rtSpcDiXEyJECgo6xUMocmTeGHS/M8J
egIxHM5QyK/CWdiKLfUpxW4B1bw1oLnChLE6lEOyIcZkHDoOTZ6LxI9pIjafZTOP
9BGzh8BN+M5jO8i6odE9q0BYaZFSK53+
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon.test.fhnw.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon.test.fhnw.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-logon.test.fhnw.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-logon.test.fhnw.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-logon.test.fhnw.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-logon.test.fhnw.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-logon.test.fhnw.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-logon.test.fhnw.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-logon.test.fhnw.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="de">FHNW-TEST - Fachhochschule Nordwestschweiz</OrganizationName>
			<OrganizationDisplayName xml:lang="de">FHNW-TEST - Fachhochschule Nordwestschweiz</OrganizationDisplayName>
			<OrganizationURL xml:lang="de">http://www.test.fhnw.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- ETHZ Test (Shibboleth IdP 1.3) -->
	<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:ethz.ch">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test1.ethz.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-login-test.ethz.ch/shibboleth-idp/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>
MIIFMzCCBBugAwIBAgILAQAAAAABHu+G2ckwDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA5
MDExOTE0NDIxNFoXDTEwMDExOTE0NDIxNFowcDELMAkGA1UEBhMCQ0gxFDASBgNV
BAoTC0VUSCBadWVyaWNoMR8wHQYDVQQDExZhYWktbG9naW4tdGVzdC5ldGh6LmNo
MSowKAYJKoZIhvcNAQkBFht2bGFkaXNsYXYubmVzcG9yQGlkLmV0aHouY2gwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZFznm0Sgi1WNkUIPJAs+B/s8
KACWNYHZsxXmgtcNgnPBQzpAZMTbys1WQvrcGyxm9S9laxgs0SvubtrDWWaidDJa
ddbp5VKon3kWzY4LJqauCh1Kh9ufx6/R7qCbr7BkoPdbMdZhhOHxxWzjFtVqnTuR
En5H/vbmbeD+/dltISysr/YFITVCJlx+cd79TnCGBXpM1AOBS3K0Cunqu0s26cb5
f4WOrjFPXcYfvtzsQbfsypLUXE0wEMoh+TcgB/Brnpz+rBYj27DGtlq7UCRD8ekR
Umv701cFanefmm2JJRoMHE5s+Kbwl5NMxYp4ToKE0XJ+IYD9p4Y487Gzdq4ZAgMB
AAGjggHdMIIB2TBQBgNVHSAESTBHMEUGByqGSLE+AQAwOjA4BggrBgEFBQcCARYs
aHR0cDovL3d3dy5nbG9iYWxzaWduLm5ldC9yZXBvc2l0b3J5L2Nwcy5jZm0wDgYD
VR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFGVloz3XOxGjCgclN8lCSlt2d1DhMB0G
A1UdDgQWBBRZ3QqZ8dViuPJuddWRg2M2XtzMSzA6BgNVHR8EMzAxMC+gLaArhilo
dHRwOi8vY3JsLmdsb2JhbHNpZ24ubmV0L2VkdWNhdGlvbmFsLmNybDBPBggrBgEF
BQcBAQRDMEEwPwYIKwYBBQUHMAKGM2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5u
ZXQvY2FjZXJ0L2VkdWNhdGlvbmFsLmNydDB/BgNVHREEeDB2ghZhYWktbG9naW4t
dGVzdC5ldGh6LmNogg5jb3BwZXIuZXRoei5jaIIXYWFpLXBvcnRhbC10ZXN0LmV0
aHouY2iCFnBiYy1sb2dpbi10ZXN0LmV0aHouY2iBG3ZsYWRpc2xhdi5uZXNwb3JA
aWQuZXRoei5jaDAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUF
BwMEMA0GCSqGSIb3DQEBBQUAA4IBAQApi1W4wZ4i1WCElacqACs9eudE/yVoiXv0
pCPRjtin0WMhNIZ2o8+kCldmSdoXCVh+ClR678jTP3szKZCUVfbRqDoYPLqhyzIE
wvxPqvW9k3XHKLcPfTNrR7NZtt36OY83rnXf98lTJi6CwIHVH+zqP6G6twIk7aH6
Y/7t3Lc36K1X7JNL7nBXQC6R8aW5n6KSeN2k954INXEXa3xu6afEjkFzv1Dljv9T
CvzDnQoHjq/KxeXz3g/CNFlsxF+7yElUkXqr6z21jZANazotpNWtU+0akFSARyV3
yupbrvUwxrl0TzgdsF6krYMN305o7GuX4zFnQyAOuzR9pfr3JwZ4
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-login-test.ethz.ch:8443/shibboleth-idp/AA"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">ETHZ Test (Shibboleth IdP 1.3)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">ETHZ Test (Shibboleth IdP 1.3)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.id.ethz.ch/support/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- ETHZ Test (Shibboleth IdP 2.1) -->
	<EntityDescriptor entityID="https://aai-login-test.ethz.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">test2.ethz.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-login-test.ethz.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIFSjCCBDKgAwIBAgILAQAAAAABIyjbRbgwDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA5
MDgxNzE0MTQzOFoXDTEyMDgxNzE0MTQzOFowcDELMAkGA1UEBhMCQ0gxFDASBgNV
BAoTC0VUSCBadWVyaWNoMR8wHQYDVQQDExZhYWktbG9naW4tdGVzdC5ldGh6LmNo
MSowKAYJKoZIhvcNAQkBFht2bGFkaXNsYXYubmVzcG9yQGlkLmV0aHouY2gwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0u6yonwKU5yZ7f8be/6Gjvuu
VGtDVYj0KVr0UGkfGKMEdXedqmjjX7wRORDxWcNVAM2f5NbYyBKGzrSGoHXdIXup
TxHHKVlIQq1FQW2jJd11Oed3MCNW2hf8zBARuKobEZqHCOrXfvBjavop57b8+e4c
Qh0WuY4FnpkJal7axkt89AnPjFwz9rW2UNq5zYQBemKqcyGOrQ7nMTNOiec24f0M
xtc6llrRIXKei2Hci26/AOWUshrn8ztBri4J/V3/Rf0YNac0OKXg7FzkS7GedgvM
0iKiSwvmwBAMnfSWLK20OkkDy3r6Sr1S2DmdfhMPB0WT0d/k5y+E9VbbN9e3AgMB
AAGjggH0MIIB8DBQBgNVHSAESTBHMEUGByqGSLE+AQAwOjA4BggrBgEFBQcCARYs
aHR0cDovL3d3dy5nbG9iYWxzaWduLm5ldC9yZXBvc2l0b3J5L2Nwcy5jZm0wDgYD
VR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFGVloz3XOxGjCgclN8lCSlt2d1DhMB0G
A1UdDgQWBBSE3pVop7stsyTQ0UO+biXBazwpxzA6BgNVHR8EMzAxMC+gLaArhilo
dHRwOi8vY3JsLmdsb2JhbHNpZ24ubmV0L2VkdWNhdGlvbmFsLmNybDBPBggrBgEF
BQcBAQRDMEEwPwYIKwYBBQUHMAKGM2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5u
ZXQvY2FjZXJ0L2VkdWNhdGlvbmFsLmNydDCBlQYDVR0RBIGNMIGKghZhYWktbG9n
aW4tdGVzdC5ldGh6LmNogg5jZW5zb3IuZXRoei5jaIIXYWFpLXBvcnRhbC10ZXN0
LmV0aHouY2iCFnBiYy1sb2dpbi10ZXN0LmV0aHouY2iCEmxkYXBzLWluZm8uZXRo
ei5jaIEbdmxhZGlzbGF2Lm5lc3BvckBpZC5ldGh6LmNoMCcGA1UdJQQgMB4GCCsG
AQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwQwDQYJKoZIhvcNAQEFBQADggEBAFmr
hxgFTD0sdXIs60fmA0mdcek8y9mDJRL4YUVLHlHJrk357kJ6rgQ2twYRo/q1PFw7
U+ONasOCkhh7viyyA6e4z7UXKYOvoD9UzSY28k6z4gBjU3sLktG2xKE8pviVb+cz
CwysvBfbLAhd/tWOM8g3rzcq06Hl4mMJ2jv3aSUhnzmBhy0g3Ovu5BaNYjpXJvMT
64yeYLdjl2H52hIdKKCBJ/eJQ5oxAVKTA7HVvq7nOo+SakP2Uc8KhYvZvMFD3xvV
JAtJOnW33xPSMb6/DWWTRDzuKMoZ004YYH3pKnFvOJU2gpqjQe3iGsCbOkczgALV
pkuZT8zRgpZW6OP+GgQ=
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-login-test.ethz.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-login-test.ethz.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-login-test.ethz.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-login-test.ethz.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-login-test.ethz.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-login-test.ethz.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai-login-test.ethz.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-login-test.ethz.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-login-test.ethz.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-login-test.ethz.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai-login-test.ethz.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">ETHZ Test (Shibboleth IdP 2.1)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">ETHZ Test (Shibboleth IdP 2.1)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.id.ethz.ch/support/</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- IDIAP - Idiap Research Institute (Test) -->
	<EntityDescriptor entityID="https://aai.test.idiap.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">idiap.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai.test.idiap.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.test.idiap.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>
			<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.test.idiap.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.test.idiap.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.test.idiap.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai.test.idiap.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai.test.idiap.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai.test.idiap.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDJDCCAgygAwIBAgIJALlKecPZpbp9MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
BAMTEWFhaS50ZXN0LmlkaWFwLmNoMB4XDTA5MDIxNzE4MjUzNloXDTEwMDIxNzE4
MjUzNlowHDEaMBgGA1UEAxMRYWFpLnRlc3QuaWRpYXAuY2gwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDVdeD34Qe2mVdz56OLEFZvAERTHi+u6mA/bW4e
U4hh2W72f2ecKirXsOpxIrqwIyV1cV+GHnizTnCjFktv+GhbmGm2sguxIUaIV0KQ
yht99mziSLRjtB6c+U64yiNdx3aDrTAWekexFclxbupXrSFNCAgNdyW8vUrFSGRr
OjXl62wnKSmZnU2G3cWRQ94I/fsAmxXjEmDGXxELkZxQf5WVas3sTbNsSCzJNQbO
29+/OujOb9RRhsKGR2H+Er+J1F8fbKYW2MJWF/Iile0gYJBFkQ9nDNrzWV4vn8f6
xkO7M4hWc+yQzGDUK+XO1PRTIEIL9FsWWtMyDjmVeyRFaSkZAgMBAAGjaTBnMB0G
A1UdDgQWBBTIpi7mhjmNpLaAbTEhVAPU4we19zBGBgNVHREEPzA9ghFhYWkudGVz
dC5pZGlhcC5jaIYoaHR0cHM6Ly9hYWkudGVzdC5pZGlhcC5jaC9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQUFAAOCAQEAXTvpYabelN1LPIGLA1+kqNw7KgLZtaC3
JksyI+FC5YJnxq+xFff30QBkE/tQPXLy/fmuQE9fiaJ6cgnzTPZ8uez5MP0tbi4c
UyJejY1G0WKa3xsYG93LzXaFruShhu03nKWuMssXq/4J64FxI7NcZcx7hnNHxrON
yX2M1+p35LnUo0aNTOYGatenGo+iVvNLG7uaT3gJuSIlHT4kQ1uulyjqLs0Zwkaf
6cyoI7K+zkKdXohtS1j/OCu9Qdg9YpHYPlnZCUTd7Ga6oI6nV5Vr0T7QYzBKZIDa
U4hWUGdww99vTJlrg8NXK3Aj8C/JgEfY3kZJhwxpyQ1VSMwuWjlbjQ==
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.test.idiap.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.test.idiap.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">IDIAP - Idiap Research Institute (Test)</OrganizationName>
			<OrganizationDisplayName xml:lang="en">IDIAP - Idiap Research Institute (Test)</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.idiap.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>
	<!-- University of Geneva Test Identity Provider -->
	<EntityDescriptor entityID="https://idp-test.unige.ch/idp/shibboleth">
		<Extensions>
			<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">idp-test.unige.ch</shibmd:Scope>
		</Extensions>
		<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp-test.unige.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
		</IDPSSODescriptor>
		<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor use="signing">
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp-test-aa.unige.ch/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
			<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
		</AttributeAuthorityDescriptor>
		<Organization>
			<OrganizationName xml:lang="en">University of Geneva Test Identity Provider</OrganizationName>
			<OrganizationDisplayName xml:lang="en">University of Geneva Test Identity Provider</OrganizationDisplayName>
			<OrganizationURL xml:lang="en">http://www.idp-test.unige.ch</OrganizationURL>
		</Organization>
	</EntityDescriptor>

		<!-- Included EntityDescriptors -->
		<EntityDescriptor entityID="https://toba.switch.ch/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">switch.ch</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://toba.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://toba.switch.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://toba.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://toba.switch.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://toba.switch.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://toba.switch.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">switch.ch</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://toba.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://toba.switch.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    
</EntityDescriptor>            <!-- eduport.co.uk2 -->

        <EntityDescriptor entityID="urn:mace:switch.ch:eduport.co.uk2">
                <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">authenticate.eduport.co.uk</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">

                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>authenticate.eduport.co.uk</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>
                        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
                        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://authenticate.eduport.co.uk/aselectserver/server/shib-idp/SSO"></SingleSignOnService>
                </IDPSSODescriptor>


                <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">authenticate.eduport.co.uk</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">
                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>authenticate.eduport.co.uk</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>

                        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://authenticate.eduport.co.uk/aselectserver/server/shib-idp/AA"></AttributeService>
                        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
                </AttributeAuthorityDescriptor>
                <Organization>
                        <OrganizationName xml:lang="en">eduport.co.uk</OrganizationName>
                        <OrganizationDisplayName xml:lang="en">eduport.co.uk</OrganizationDisplayName>
                        <OrganizationURL xml:lang="en">http://eduport.co.uk</OrganizationURL>
                </Organization>

                <ContactPerson contactType="technical">
                        <SurName>siennax (www.edupoort.nl)</SurName>
                        <EmailAddress>ben.heesen@siennax.com</EmailAddress>
                </ContactPerson>
        </EntityDescriptor>

        <!-- eduport.co.uk -->

        <EntityDescriptor entityID="urn:mace:switch.ch:eduport.co.uk">
                <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">authenticate.eduport.co.uk</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">

                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>authenticate.eduport.co.uk</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>
                        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
                        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://authenticate.eduport.co.uk/aselectserver/server/sso"></SingleSignOnService>
                </IDPSSODescriptor>


                <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">authenticate.eduport.co.uk</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">
                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>authenticate.eduport.co.uk</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>

                        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://authenticate.eduport.co.uk/aselectserver/server/artifact"></AttributeService>
                        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
                </AttributeAuthorityDescriptor>
                <Organization>
                        <OrganizationName xml:lang="en">eduport.co.uk</OrganizationName>
                        <OrganizationDisplayName xml:lang="en">eduport.co.uk</OrganizationDisplayName>
                        <OrganizationURL xml:lang="en">http://eduport.co.uk</OrganizationURL>
                </Organization>

                <ContactPerson contactType="technical">
                        <SurName>siennax (www.edupoort.nl)</SurName>
                        <EmailAddress>ben.heesen@siennax.com</EmailAddress>
                </ContactPerson>
        </EntityDescriptor>

<!--
Auf Wunsch von Torsten Kersting@DFN
-->
<EntityDescriptor entityID="gs4gt.awi.de">
                <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">gs4gt.awi.de</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">
                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>gs4gt.awi.de</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>
                                <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>

                        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://gs4gt.awi.de/simplesaml/shib13/idp/SSOService.php"></SingleSignOnService>

                </IDPSSODescriptor>


                <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
                        <Extensions>
                                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">gs4gt.awi.de</shibmd:Scope>
                        </Extensions>
                        <KeyDescriptor use="signing">
                                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                                        <ds:KeyName>gs4gt.awi.de</ds:KeyName>
                                </ds:KeyInfo>
                        </KeyDescriptor>
                        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://gs4gt.awi.de/simplesaml/shib13/idp/AAService.php"></AttributeService>

                        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
                </AttributeAuthorityDescriptor>
                <Organization>
                        <OrganizationName xml:lang="de">SimpleSAML Test IdP AWI</OrganizationName>
                        <OrganizationDisplayName xml:lang="de">SimpleSAML Test IdP AWI</OrganizationDisplayName>
                        <OrganizationURL xml:lang="de">http://gs4gt.awi.de</OrganizationURL>
                </Organization>

                <ContactPerson contactType="technical">
                        <SurName>Joerg Matthes</SurName>
                        <EmailAddress>Joerg.Matthes@awi.de</EmailAddress>
                </ContactPerson>
                <ContactPerson contactType="support">
                        <SurName>Joerg Matthes</SurName>
                        <EmailAddress>Joerg.Matthes@awi.de</EmailAddress>
                </ContactPerson>
                <ContactPerson contactType="administrative">
                        <SurName>Joerg Matthes</SurName>
                        <EmailAddress>Joerg.Matthes@awi.de</EmailAddress>
                </ContactPerson>
        </EntityDescriptor>

<EntityDescriptor entityID="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam">
    <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
	    
       <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>
MIIEcjCCA1qgAwIBAgICALUwDQYJKoZIhvcNAQEFBQAwdTELMAkGA1UEBhMCQ0gxDzANBgNVBAcT
Blp1cmljaDETMBEGA1UEChMKU1dJVENIIEFBSTEMMAoGA1UECxMDQUFJMRQwEgYDVQQDEwtBQUkg
VGVzdCBDQTEcMBoGCSqGSIb3DQEJARYNYWFpQHN3aXRjaC5jaDAeFw0wNzEyMDUxMzE2MzBaFw0w
ODEyMDQxMzE2MzBaMIGCMQswCQYDVQQGEwJDSDEqMCgGA1UEChMhRmFjaGhvY2hzY2h1bGUgWmVu
dHJhbHNjaHdlaXogRkhaMSQwIgYDVQQDExt1YnVudHUtc3AuZXN4LmVsLmh0YS5maHouY2gxITAf
BgkqhkiG9w0BCQEWEmNtYXRoeXNAaHRhLmZoei5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALu/esrk1LvPg5C80Ci3z4ecpIDjUTjhK0eTQuvL7W97NATJkozY/s2xCQ8Y57Xln1fH
vlbAhrN10FTEAJGpqZ+ElgpJtXW44wrM3wI37XNEYbLdEfTV61PQnTqL6X4O92czEFXvwrNnlLHE
3CXHINReI8pdBQQwt44bsARL+E6ZJNKdOqi5UMZqnlwXomTEXQnoXS7eRGiJSYYzriyXoGWyeMpw
HV/GJuGBvdt7MHNM440F14x7SavIkmiMyMDb0lZNska5nwBtT5HEJuFqj6RK7KlOH3gRd81S33VF
KzRaAiE11LKzIuxuZD0JaPBs+bJjmXb8eEu7AfgpplzGQKsCAwEAAaOB/TCB+jAJBgNVHRMEAjAA
MCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
g0MBPMZlRlcafP1F37N+jvsAqZAwgZ8GA1UdIwSBlzCBlIAUBUfEhodT+g8w0FKlofBLJmt5UkOh
eaR3MHUxCzAJBgNVBAYTAkNIMQ8wDQYDVQQHEwZadXJpY2gxEzARBgNVBAoTClNXSVRDSCBBQUkx
DDAKBgNVBAsTA0FBSTEUMBIGA1UEAxMLQUFJIFRlc3QgQ0ExHDAaBgkqhkiG9w0BCQEWDWFhaUBz
d2l0Y2guY2iCAQAwDQYJKoZIhvcNAQEFBQADggEBAI63XZpk30mcXgDQ8oaypcFaEmx/qFk4VVPZ
Wx5PfkN3akpcEHsFZ8/Z3Tn/Q1o5aOBovWyxy8ks5yvdsUxRRLNIEevcIMbJltbHwlxhJ+j6Pslp
HbXTsxkTv8IEkWV8/yka0hCydQNOx3tx5TQYWXidTWbw2vX5k+w55uv37UsHHXdG+Vp0Nsd9TJhi
TIVPjvBFa68BuZwF2PuGhqCQEmxOOt9sJo3jGYlvly78b3SOjgWUghOLT/ZZI4jPfcGQIOaLA7Hb
vEc0UBJE7Q2Vi6JmQd2i22ZngECAZiMNoH31Sc8JDnCEnsc+WuzhzFv73ownI/MoFdA0H92MGl9C
TvQ=		    
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
	
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPSloRedirect/metaAlias/spmeta" ResponseLocation="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPSloRedirect/metaAlias/spmeta"></SingleLogoutService>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPSloSoap/metaAlias/spmeta"></SingleLogoutService>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniRedirect/metaAlias/spmeta" ResponseLocation="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniRedirect/metaAlias/spmeta"></ManageNameIDService>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniPOST/metaAlias/spmeta" ResponseLocation="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniPOST/metaAlias/spmeta"></ManageNameIDService>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniSoap/metaAlias/spmeta" ResponseLocation="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/SPMniSoap/metaAlias/spmeta"></ManageNameIDService>
        <NameIDFormat>
            urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
        </NameIDFormat>
        <NameIDFormat>
            urn:oasis:names:tc:SAML:2.0:nameid-format:transient
        </NameIDFormat>
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/Consumer/metaAlias/spmeta" index="0"></AssertionConsumerService>
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/Consumer/metaAlias/spmeta" index="1" isDefault="true"></AssertionConsumerService>
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://ubuntu-sp.esx.el.hta.fhz.ch:8443/fam/Consumer/ECP/metaAlias/spmeta" index="2"></AssertionConsumerService>
    </SPSSODescriptor>
</EntityDescriptor>
<EntityDescriptor entityID="http://shibvm8.et-test.psu.edu">

<!-- SAML 1 Only -->
<!--
    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol">
-->

<!-- SAML 2 Only -->
<!--
    <IDPSSODescriptor protocolSupportEnumeration=" urn:oasis:names:tc:SAML:2.0:protocol">
-->

<!-- SAML 1 & 2 -->
    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">psu.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/Shibboleth/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML2/POST/SSO"></SingleSignOnService>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
    </IDPSSODescriptor>

<!-- SAML 1 Only -->
<!--
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-->

<!-- SAML 2 Only -->
<!--
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-->

<!-- SAML 1 & 2 -->
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">psu.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://shibvm8.et-test.psu.edu:8080/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    </AttributeAuthorityDescriptor>
</EntityDescriptor>    
<EntityDescriptor entityID="https://lawu.switch.ch/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">switch.ch</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://lawu.switch.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"></ArtifactResolutionService>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lawu.switch.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"></ArtifactResolutionService>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://lawu.switch.ch/idp/profile/Shibboleth/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lawu.switch.ch/idp/profile/SAML2/POST/SSO"></SingleSignOnService>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://lawu.switch.ch/idp/profile/SAML2/POST-SimpleSign/SSO"></SingleSignOnService>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lawu.switch.ch/idp/profile/SAML2/Redirect/SSO"></SingleSignOnService>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">switch.ch</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://lawu.switch.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"></AttributeService>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lawu.switch.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"></AttributeService>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    
</EntityDescriptor>    

		<!-- Service Provider Definitions -->
		
		<!-- No certificates embedded -->
		<!-- SWITCH, AAI Demo Resource -->
		<EntityDescriptor entityID="https://kohala.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>kohala.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://aaitest-sp.switch.ch/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://kohala.switch.ch/other-app/Shibboleth.sso/SAML/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://kohala.switch.ch/Shibboleth.sso/SAML/POST" index="3" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://guenter.canoo.com/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.canoo.com</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://guenter.canoo.com/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- SWITCH, AAI Attributes Viewer 1.2.1 -->
		<EntityDescriptor entityID="https://rinjani.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>rinjani.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://rinjani.switch.ch/Shibboleth.shire" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- blogug-freebsd-testing -->
		<EntityDescriptor entityID="https://aai.blogug.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai.blogug.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai.blogug.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Science Direct -->
		<EntityDescriptor entityID="https://sdauth.sciencedirect.com/">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>sciencedirect.partner-switchaai.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1746.sciencedirect.com:25007/SHIRE" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1747.sciencedirect.com:25007/SHIRE" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1748.sciencedirect.com:25007/SHIRE" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1749.sciencedirect.com:25007/SHIRE" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1764.sciencedirect.com:25007/SHIRE" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cpc1765.sciencedirect.com:25007/SHIRE" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://dvc7411.lexisnexis.com:25007/SHIRE" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://tpc1770.sciencedirect.com:25007/SHIRE" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://tpc1771.sciencedirect.com:25007/SHIRE" index="9"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth-cert3.sciencedirect.com/SHIRE" index="10"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth-cert4.sciencedirect.com/SHIRE" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth.sciencedirect.com/SHIRE" index="12" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://macha.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://macha.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://macha.switch.localhost/Shibboleth.sso/SAML/POST" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://macvt.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>macvt.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://macvt.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- SWITCH, AAIportal DEMO -->
		<EntityDescriptor entityID="https://demo.aaiportal.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>demo.aaiportal.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://demo.aaiportal.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- EVA - Einfache virtuelle Ablage -->
		<EntityDescriptor entityID="https://shibbo-eva.urz.unibas.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>shibbo-eva.urz.unibas.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shibbo-eva.urz.unibas.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Service Provider Test Page -->
		<EntityDescriptor entityID="https://aai2-sp.phbern.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai2-sp.phbern.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai2-sp.phbern.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- e-Learning Moodle Test -->
		<EntityDescriptor entityID="https://moodle2.phbern.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>moodle2.phbern.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://moodle2.phbern.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Entwicklungs-Umgebung -->
		<EntityDescriptor entityID="https://dev1.phbern.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dev1.phbern.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dev1.phbern.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev1.phbern.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dev1.phbern.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dev1.phbern.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dev1.phbern.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev1.phbern.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dev1.phbern.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dev1.phbern.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://dev1.phbern.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test for Shibbolized Webpages -->
		<EntityDescriptor entityID="https://mahawu.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>mahawu.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://mahawu.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test Resource for eduGAIN -->
		<EntityDescriptor entityID="https://caldera.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>caldera.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://caldera.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- eduGAIN Home Bridging Element (Test) -->
		<EntityDescriptor entityID="https://tengger.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tengger.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://tengger.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test -->
		<EntityDescriptor entityID="https://www.unilu-ikk.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.unilu-ikk.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.unilu-ikk.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test Resource -->
		<EntityDescriptor entityID="https://shibboleth.e-academy.com/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>shibboleth02.e-academy.com</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shibboleth02.e-academy.com/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Blackboard Test Resource -->
		<EntityDescriptor entityID="https://www.dermacvonnick.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.dermacvonnick.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.dermacvonnick.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- www3 -->
		<EntityDescriptor entityID="https://www3.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www3.unifr.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://www3.unifr.ch/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www3.unifr.ch/Shibboleth.sso/SAML/POST" index="2" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test de shibbolisation de l'application Claroline -->
		<EntityDescriptor entityID="https://claro-test.unine.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>CLARO-TEST.UNINE.CH</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://claro-test.unine.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Claroline test -->
		<EntityDescriptor entityID="https://acad-test.unine.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>acad-test.unine.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://acad-test.unine.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://bayamo.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>bayamo.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://bayamo.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://aai.halimedia.com/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>pempheris.halimedia.com</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://aai.halimedia.com/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://localhost/Shibboleth.sso/SAML/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://vsl-standby.unil.ch/Shibboleth.sso/SAML/POST" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai.halimedia.com/Shibboleth.sso/SAML/POST" index="4" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://localhost/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://vsl-standby.unil.ch/Shibboleth.sso/SAML/POST" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- KoS Shibboleth test site -->
		<EntityDescriptor entityID="https://venus.kos.li/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>venus.kos.li</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://venus.kos.li/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://egon.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>egon.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://egon.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://egon.switch.ch/Shibboleth.sso/SAML/Artifact" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://teon.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>teon.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://teon.switch.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://teon.switch.ch/Shibboleth.sso/SAML/Artifact" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- CHUV test -->
		<EntityDescriptor entityID="https://atbash.hospvd.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>atbash.hospvd.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://atbash.hospvd.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://thor.aai.dfn.de/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>thor.aai.dfn.de</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://thor.aai.dfn.de/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://sr-svx-92.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>sr-svx-92.unifr.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://sr-svx-92.unifr.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Glossary -->
		<EntityDescriptor entityID="https://vmelab03.unisi.ch/glossary/shibboleth/">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>vmelab03.unisi.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://vmelab03.unisi.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- DOIT, Dermatology eLearning -->
		<EntityDescriptor entityID="https://aai2.cyberderm.net/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai.cyberderm.net</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai2.cyberderm.net/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test PHP SP -->
		<EntityDescriptor entityID="feide.erlang.no">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>feide.erlang.no</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://feide.erlang.no/shibbolethsp/AssertionConsumerService.php" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://feide.erlang.no/shibbolethsp/AssertionConsumerService.php" index="2" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://www.itka.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.itka.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://www.itka.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://www.itka.ch/Shibboleth.sso/SAML/Artifact" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://vvv.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>vvv.unifr.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://vvv.unifr.ch/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://vvv.unifr.ch/Shibboleth.sso/SAML/POST" index="2" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://commonweb.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>commonweb.unifr.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://commonweb.unifr.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://commonweb.unifr.ch/Shibboleth.sso/SAML/POST" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://twiki2.phbern.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dev1.phbern.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://twiki2.phbern.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test-Service-Provider Uni Basel -->
		<EntityDescriptor entityID="https://test-sp.unibas.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>test-sp.unibas.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://test-sp.unibas.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://forschdb-test.urz.unibas.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>forschdb-test.urz.unibas.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://forschdb-test.urz.unibas.ch/Shibboleth.sso/SAML/POST" index="1" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://dieng.switch.ch/otherapp/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dieng.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://dieng.switch.ch/otherapp/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>

		<!-- Certificates embedded -->
		<!-- Not public -->
		<EntityDescriptor entityID="https://ebulobo.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ebulobo.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ebulobo.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ebulobo.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ebulobo.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ebulobo.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ebulobo.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ebulobo.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ebulobo.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ebulobo.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://ebulobo.switch.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://sumbing.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>sumbing.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://sumbing.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://sumbing.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://sumbing.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://sumbing.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sumbing.switch.ch/Shibboleth.sso/SAML/POST" index="6" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://sumbing.switch.ch/Shibboleth.sso/SAML/Artifact" index="7"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- SIUFAAISP Attributes Viewer -->
		<EntityDescriptor entityID="https://siufaaisp.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>siufaaisp.unifr.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://siufaaisp.unifr.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Resource Registry -->
		<EntityDescriptor entityID="https://aai-rr.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-rr.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML/POST" index="9"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML/POST" index="10" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://aai-rr.switch.ch/aaitest/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://rr.aai.switch.ch/aaitest/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- BSCW Shared Workspace System -->
		<EntityDescriptor entityID="https://bscw2.phbern.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>bscw2.phbern.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bscw2.phbern.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bscw2.phbern.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bscw2.phbern.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bscw2.phbern.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bscw2.phbern.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bscw2.phbern.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bscw2.phbern.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bscw2.phbern.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://bscw2.phbern.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://aai.fhnw.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai.fhnw.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.fhnw.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.fhnw.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai.fhnw.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.fhnw.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.fhnw.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.fhnw.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai.fhnw.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.fhnw.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://aai.fhnw.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://moodle-test.unifr.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>moodle-test.unifr.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDLDCCAhSgAwIBAgIJAP4GxnPzNq+PMA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNV
BAMTFG1vb2RsZS10ZXN0LnVuaWZyLmNoMB4XDTA5MDcwMTEyMTA0NVoXDTEyMDcw
MTEyMTA0NVowHzEdMBsGA1UEAxMUbW9vZGxlLXRlc3QudW5pZnIuY2gwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6ibJQ++wBad3psFjIUgep77UvhuW
mum0CPmPzTZleP4oBbnPGoG5ejH+9uI8zVdtgE5bLaOFklM0LNb925EohfMUfPAb
70SoMZgtEz2RX5niOh5ogfsKXSYzxkMLaJDYRo9eBkCViuMPugaDvn2+1br7oOr7
jqiw8fjMKAnUyjE2tXKEx2sF9Lut4IVT+VOl7xVNMp/lrJ7YrmQ16b3/vOyyqZcG
kC+8x3ehB6nernpVekc3u3iMQ/U1ENc/QTjVhy64wnJyFCFRSurzbqw6G+8ECx51
tA3jy92u7MAiq77CHhuEUDDyOVdMBG6f3LaCQO5+3ioLl1vBngBFP/wNAgMBAAGj
azBpMEgGA1UdEQRBMD+CFG1vb2RsZS10ZXN0LnVuaWZyLmNohidodHRwczovL21v
b2RsZS10ZXN0LnVuaWZyLmNoL3NoaWJib2xldGgwHQYDVR0OBBYEFFEmDc/NAQ+i
AFjuGoKDZXa76yDfMA0GCSqGSIb3DQEBBQUAA4IBAQBme5KhNy+nxapbxCAgku7i
9MoloTZdeBu8qbgGNP4PPw4ANtHA+nZzvlTo0q2skHkAprMNsHMJgwSUOroJk88m
Pc1QXzLwZNb08mvKhMKEPO4GfvvQ0QTt+irIGgXbTvunnhPIhhETjkz52CMHaYgm
4HpAunHJwbSAB5wlRkdxPMsxB0az5QHQXb01mIH8/uzk3DGd1UJqGoiKTiCPGG5N
ZfKwJ4EumeobeGPy/ggYNM4wCKX3ViHMWUiaxrs8Re0X9mDodPFtJt8TlpzRnliJ
oBWd9FI1HsIOnrSMfV1LOCVg7uGV7G2HKm9TSFfPB9Wl7Y3zvS/3I975IuWFV5Ka
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://moodle-test.unifr.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moodle-test.unifr.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moodle-test.unifr.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moodle-test.unifr.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://moodle-test.unifr.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Test SWITCH VHO -->
		<EntityDescriptor entityID="https://tools.test.vho-switchaai.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>tools-test.vho-switchaai.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDSDCCAjCgAwIBAgIJAIL7gf3EijrnMA0GCSqGSIb3DQEBBQUAMCYxJDAiBgNV
BAMTG3Rvb2xzLnRlc3QudmhvLXN3aXRjaGFhaS5jaDAeFw0wOTAzMTAxNDMwMzNa
Fw0xMjAzMDkxNDMwMzNaMCYxJDAiBgNVBAMTG3Rvb2xzLnRlc3QudmhvLXN3aXRj
aGFhaS5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhsVUMaKCna
W5qCGi0r/sjuu0/WutHRX1gNks91MQrjbs9aa+/+cw/KgKuo8TXHBTcSYgPSeKtF
eECRGzctq4vC/ulxiRXQRlaMFYUra41+OPxiUp7Y1otlhXaQL9jZXfOf97ttjHSx
jWNk3y3PFPadP9cTjy5EUs2uZoexxxV70GKkF8ug5RLfxt69cV82ffClvwg3FC26
DOK+3cGiVNTkVahoMZU3bcPtyoxg1y+soS5AqxHETnW3IlaJgw/Psm6qaCjH8jwX
Ni+ovIug9xlMfPCXBT+1ZIq62CPPiesFtFoBivqXTQm87NvkQstB4zTAL6G1/Exr
TBkS8qR5LacCAwEAAaN5MHcwVgYDVR0RBE8wTYIbdG9vbHMudGVzdC52aG8tc3dp
dGNoYWFpLmNohi5odHRwczovL3Rvb2xzLnRlc3QudmhvLXN3aXRjaGFhaS5jaC9z
aGliYm9sZXRoMB0GA1UdDgQWBBS/61Xvsc4E62p4q5ip/0fP6/WY+zANBgkqhkiG
9w0BAQUFAAOCAQEAUauUvb98nul1ebhXkneJ1u4JD9eRyw60XzHrpMlCyw5/9jLu
YBZHQt0dAVruCib71g4bedKzrWVgI4p3GfMIeqraTD+BTrRfThdIm8TIGqoVscSw
CP//y2dzBLT8FWrd9lWjG16jgZKdnAVCRTZanLCOoPToe/1LRbFC7T0j0w7E0EsZ
cJlS79MXfodK3+9rNDhvD5/ElC/xRURUXE5HHrwKNWvuJ4bxh8aD0thOFx/ZQBnr
fhcPepE8wOLYv4XWMTNivF1WoWYUFO9NDOvqB/5Dkqk+AoPeysSGkwibbkFl1NzT
NJ4e2Ue1FTAtfEinR6Y4VUiD30j1cK204QfCPA==
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://tools.test.vho-switchaai.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://moti.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>moti.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://moti.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moti.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moti.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moti.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://moti.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moti.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moti.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moti.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moti.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://moti.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moti.switch.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://moti.switch.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://moti.switch.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://moti.switch.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="urn:mace:switch.ch:aaitest:ezproxy">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>gw.usefulutilities.com</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://gw.usefulutilities.com:3443/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://gw.usefulutilities.com:3443/Shibboleth.sso/SAML2/Artifact" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://gw.usefulutilities.com:3443/Shibboleth.sso/SAML/POST" index="3" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://gw.usefulutilities.com:3443/Shibboleth.sso/SAML/Artifact" index="4"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- AAI DEMO SP -->
		<EntityDescriptor entityID="https://aai-demo.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-demo.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-demo.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-demo.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-demo.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-demo.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-demo.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-demo.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-demo.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-demo.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML/POST" index="9" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML/POST" index="10"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://aai-demo.switch.ch/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://webdav-demo.aai.switch.ch/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://www.jobzippers.eu/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.jobzippers.eu</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.jobzippers.eu/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.jobzippers.eu/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.jobzippers.eu/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.jobzippers.eu/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.jobzippers.eu/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.jobzippers.eu/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.jobzippers.eu/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.jobzippers.eu/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.jobzippers.eu/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://seserver01.unibe.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>seserver01.unibe.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://seserver01.unibe.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://seserver01.unibe.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://seserver01.unibe.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://seserver01.unibe.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://seserver01.unibe.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://seserver01.unibe.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://seserver01.unibe.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://seserver01.unibe.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://seserver01.unibe.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- UniBern Uniprint Service -->
		<EntityDescriptor entityID="https://uniprint.unibe.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>uniprint.unibe.ch </ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIFADCCA+igAwIBAgILAQAAAAABG8FkgrEwDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA4
MDgxNDEzMjUzNFoXDTExMDgxNDEzMjUzNFowgY8xCzAJBgNVBAYTAkNIMQ0wCwYD
VQQHEwRCZXJuMRowGAYDVQQKExFVbml2ZXJzaXRhZXQgQmVybjEaMBgGA1UECxMR
SW5mb3JtYXRpa2RpZW5zdGUxGjAYBgNVBAMTEXVuaXByaW50LnVuaWJlLmNoMR0w
GwYJKoZIhvcNAQkBFg52aUBpZC51bmliZS5jaDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5qHTgHBjlS2qrdBtdA6uGIsYRW4eztDOrPD9OXhZiJ9n6M
t8owwBFL1zDavFc/L4yShAVamPp7d4V4XjTz4LCzLdbfO2yk2SWc7wzS0vcrw0U4
cphA63dWPfxSDxbGbHYjKy35i2I62eTt8XkfLLiU4tRs/SRzbLL7TZn8HnoVOf3q
4LTAdzmJzK2cvtdVQi74lsmeMQ5teH7BMecMzW2Bkf8woXmJwptl8t0ajsRxqNhg
JQEXKsKmZ8rFzv/0nI0/uy5ayZqDtEcguW8hqypVYeMLj4/nSCz7rddAy+HfUhjR
4fQ35x311GlcV3Hs0+F7XGXOSOXzUoifT4Fyj/ECAwEAAaOCAYowggGGMFAGA1Ud
IARJMEcwRQYHKoZIsT4BADA6MDgGCCsGAQUFBwIBFixodHRwOi8vd3d3Lmdsb2Jh
bHNpZ24ubmV0L3JlcG9zaXRvcnkvY3BzLmNmbTAOBgNVHQ8BAf8EBAMCBaAwHwYD
VR0jBBgwFoAUZWWjPdc7EaMKByU3yUJKW3Z3UOEwHQYDVR0OBBYEFAxCu7m+ml7/
+sMsAubstVdNIcSVMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwuZ2xvYmFs
c2lnbi5uZXQvZWR1Y2F0aW9uYWwuY3JsME8GCCsGAQUFBwEBBEMwQTA/BggrBgEF
BQcwAoYzaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLm5ldC9jYWNlcnQvZWR1Y2F0
aW9uYWwuY3J0MCwGA1UdEQQlMCOCEXVuaXByaW50LnVuaWJlLmNogQ52aUBpZC51
bmliZS5jaDAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwME
MA0GCSqGSIb3DQEBBQUAA4IBAQAt+F+6f4jYXI9BPTvAPpLe/lhsBW6/3VzxDwz0
HxtHy6LEr4G8vTThVYViJC6IaxOVy1QDbjToov9/oJt6ZdTy0EIiCh5o73NlK6zU
tchq2kZJv9PyEAAlc98HjX4QlGxuFocvUu1sVlk8zKkdexWsz0B0DOOnJe+yqwt8
UWWsvrAeJ9/E5QlCcbqjQw5kwSKQHMEHA76mf2RtAeT2DAkcEA1FqUFa709e8LAU
XjJyMs1JxLUMPOwd8mtcAVNwgDBrOaE0rxGu7VBVz/XS00PH1APAqkpiYRGUtbjv
o+zwIfdvkh2Z4f+lK75r6/K3KsyYbTAyPo4eTWT4dBJDn+PC

						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://uniprint.unibe.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uniprint.unibe.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://uniprint.unibe.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://uniprint.unibe.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://uniprint.unibe.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uniprint.unibe.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://uniprint.unibe.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://uniprint.unibe.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://uniprint.unibe.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://aai-testsp.unibe.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>aai-testsp.unibe.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIFEDCCA/igAwIBAgILAQAAAAABG+QBiFMwDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA4
MDgyMTA2NDQxMFoXDTExMDgyMTA2NDQxMFowgZcxCzAJBgNVBAYTAkNIMQ0wCwYD
VQQHEwRCZXJuMRowGAYDVQQKExFVbml2ZXJzaXRhZXQgQmVybjEaMBgGA1UECxMR
SW5mb3JtYXRpa2RpZW5zdGUxHDAaBgNVBAMTE2FhaS10ZXN0c3AudW5pYmUuY2gx
IzAhBgkqhkiG9w0BCQEWFHNlY3VyaXR5QGlkLnVuaWJlLmNoMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQb22BK2VX53AcaymTNE71OTbgnCnaGIX1wH
Am2RkiKMJokFowt66e9ocBnO+lfhEfkrr6Y5viBk+/nNm1O61U70XhOn0lscn0hl
/ALRuozV/wgc9SkJ8c6QRtUYN2ytv1XCkbOD0KMHxi2SjHD+Ddg1nDeDl1vqhPeo
4BTUjIVeuhddWmqP2Sl76A6siUEZ0t7qglEzPkNFdf9sBnnXIZw+ZL09broUazOB
uWy556T4iIHvLogOjCVcuQIFBEwkbVouFfQRBa7jwWp0rmUyWp1Sxgll4PL0dII9
8fo3T+371QNQoFNCHoy/1BH5wFRtKLrdVoTQsQkL11nR9dHcfwIDAQABo4IBkjCC
AY4wUAYDVR0gBEkwRzBFBgcqhkixPgEAMDowOAYIKwYBBQUHAgEWLGh0dHA6Ly93
d3cuZ2xvYmFsc2lnbi5uZXQvcmVwb3NpdG9yeS9jcHMuY2ZtMA4GA1UdDwEB/wQE
AwIFoDAfBgNVHSMEGDAWgBRlZaM91zsRowoHJTfJQkpbdndQ4TAdBgNVHQ4EFgQU
8Xeke1P8O15BUNeznQsFolTGuZUwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2Ny
bC5nbG9iYWxzaWduLm5ldC9lZHVjYXRpb25hbC5jcmwwTwYIKwYBBQUHAQEEQzBB
MD8GCCsGAQUFBzAChjNodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24ubmV0L2NhY2Vy
dC9lZHVjYXRpb25hbC5jcnQwNAYDVR0RBC0wK4ITYWFpLXRlc3RzcC51bmliZS5j
aIEUc2VjdXJpdHlAaWQudW5pYmUuY2gwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsG
AQUFBwMCBggrBgEFBQcDBDANBgkqhkiG9w0BAQUFAAOCAQEALkplj9KWM4k3KZRV
cpMd5zKuZm5xY2RQOAD6X+lLCuqskR1rBFM0r2sOBxD7C3w93PQehpG3H9ewMbYE
l4Qgzrlkm7TD8Olb6WLGbvjdSs2w83Rg0UuzjoXyKlZDt2H5jsd4UaPZWKySPm6z
FJVW3m4NGE/WXAdt2d9hBdDYPFoo/FqUPPpcpDugewcXHf+0ey70thSvgdCL3K8z
xwMvOAZAzyFQFIVIF2c3RTnxw+cNHVYuJxuRRAm9nHcYl9IL4bgV6UQz4PlAM5s9
pBeymr8puVK5ZMXdOtaCSRYo71LfPFexvfJ1Jin4VN8jBBu7UTZ5LZYAuCAP5IVh
i3Hb7w==
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://aai-testsp.unibe.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://docexchange-test.unibas.ch/docExchange/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>docexchange-test.unibas.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://docexchange-test.unibas.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://chbtptst.oclcpica.org/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>chbtptst.oclcpica.org</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML/POST" index="9"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML/POST" index="10" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://chbtptst.oclcpica.org/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://chbtptst.oclcpica.org/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://test-xtremwebch.eig.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>test-xtremwebch.eig.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://test-xtremwebch.eig.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://www.infoclio.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>www.infoclio.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.infoclio.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.infoclio.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.infoclio.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.infoclio.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.infoclio.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.infoclio.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.infoclio.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.infoclio.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.infoclio.ch/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.infoclio.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.infoclio.ch/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.infoclio.ch/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML/POST" index="9"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.infoclio.ch/Shibboleth.sso/SAML/POST" index="10" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://infoclio.clients.liip.ch/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.infoclio.ch/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Microsoft DreamSpark Staging -->
		<EntityDescriptor entityID="https://staging.dreamspark.com/shibboleth-sp">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>staging.dreamspark.com</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://staging.dreamspark.com/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://staging.dreamspark.com/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://staging.dreamspark.com/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://staging.dreamspark.com/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://staging.dreamspark.com/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://staging.dreamspark.com/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://staging.dreamspark.com/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://staging.dreamspark.com/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://staging.dreamspark.com/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://pegasust.unine.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>pegasust.unine.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://pegasust.unine.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://pegasust.unine.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://pegasust.unine.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://pegasust.unine.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://pegasust.unine.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://pegasust.unine.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://pegasust.unine.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://pegasust.unine.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://pegasust.unine.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- unterrichtsvideos test -->
		<EntityDescriptor entityID="https://unterrichtsvideos.schwyz.phz.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>unterrichtsvideos.schwyz.phz.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML/POST" index="9"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML/POST" index="10"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://www.unterrichtsvideos.ch/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.unterrichtsvideos.ch/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
	<!-- Forced SAML 1 Attribute Push Service Providers -->
	<EntitiesDescriptor Name="https://www.switch.ch/aai/SAML1/Attribute-Push">
		<!-- SWITCH, AAI Attributes Viewer 1.3 (kelimutu) -->
		<EntityDescriptor entityID="https://kelimutu.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>kelimutu.switch.ch</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://kelimutu.switch.ch/bscw/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://kelimutu.switch.ch/Shibboleth.sso/SAML/POST" index="2" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://kelimutu.switch.ch/Shibboleth.sso/SAML/Artifact" index="3"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- ETH Alumni Test Service -->
		<EntityDescriptor entityID="https://alumni.ethz.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>starlight.imstrategies.mine.nu</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIDRDCCAiygAwIBAgIJAK4TQcCLAJYcMA0GCSqGSIb3DQEBBQUAMCkxJzAlBgNV
BAMTHnN0YXJsaWdodC5pbXN0cmF0ZWdpZXMubWluZS5udTAeFw0wOTAzMzExMTU2
MDZaFw0xMjAzMzAxMTU2MDZaMCkxJzAlBgNVBAMTHnN0YXJsaWdodC5pbXN0cmF0
ZWdpZXMubWluZS5udTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPIm
74vNzXAoSOLkHasvfekbwNjMjM8bEQU/YYYmknuIbBTQeRYleKm9JopzN7pGdOb2
vChCtTkTZ26I5aXk9VfHs9BEZvcT4enD6YKsjgEjI3dqr1/7st8ymsoD7juy1CUb
C9+WcfBQrrYr7U0iBARvUNGwWYuIOtjdxGWNBx475IlIUsJMcYPm6W/WHklrRgRK
iWefBpSYMwLwbAB3lS2N7JBHeCxZoy5UbNIS9pRVg4vm/2MmfiX2sa9AbgFp3EEf
vOAltK+2qCa1UCJhoOP7K+JP6WL1JelEFI8S7YpnSNWtKvlt6eqxKhHJkctjEb+v
5CnPJYmmy5o2gGS9WJcCAwEAAaNvMG0wTAYDVR0RBEUwQ4Iec3RhcmxpZ2h0Lmlt
c3RyYXRlZ2llcy5taW5lLm51hiFodHRwczovL2FsdW1uaS5ldGh6LmNoL3NoaWJi
b2xldGgwHQYDVR0OBBYEFOp2Jrbkk7kDXKrFz6+DHjEKJtWkMA0GCSqGSIb3DQEB
BQUAA4IBAQDCr2qf6xhllPncwezUaJlYKNXhxt99l/fudscImXTWisd0j0Sn/tdO
8StOJcGOqF3hsnHtJGir5ZoO5C41GmXYtxIA5WS6UoqjoE3ZkJjh695lS5zIDPat
C4TYgKk/NCVWVU3c+REXn5Lq5xU3UAG8wb2ydBvl4MmBUeQtluJCGGpkQZVa81Fw
Z5KEvbkm9SyS+tw6LD/UXae9Gr5u0yyxJp3jE5f3qgpIDgo5Et2fY9UW/+XvMyOn
LPu4v7v1Yjyd+NHKhA405uhYJ6B5gGCarwRkBOOsAzYy+9KN9Xr253tVa2jysb5R
wxHayzj0PJ5D3/3aGBMAMLVKlZGnnVFi
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://starlight.imstrategies.mine.nu/Shibboleth.sso/SAML/POST" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://starlight.imstrategies.mine.nu:9980/Shibboleth.sso/SAML/Artifact" index="7"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- eduGAIN Home Bridging Element (Prod) -->
		<EntityDescriptor entityID="https://edugain-login.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>edugain-login.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://edugain-login.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edugain-login.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edugain-login.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://edugain-login.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://edugain-login.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edugain-login.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edugain-login.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://edugain-login.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://edugain-login.switch.ch/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://orbigate.orbiteam.de/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>orbigate.orbiteam.de</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://orbigate.orbiteam.de/Shibboleth.sso/SAML/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://orbigate.orbiteam.de/Shibboleth.sso/SAML/POST" index="2" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://orbigate.orbiteam.de/Shibboleth.sso/SAML/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://orbigate.orbiteam.de/Shibboleth.sso/SAML/Artifact" index="4"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="http://dev.andreas.feide.no">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dev.andreas.feide.no</ds:KeyName>
				</ds:KeyInfo>
			</KeyDescriptor>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://dev.andreas.feide.no/shib13/sp/AssertionConsumerService.php" index="1" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dev.andreas.feide.no/shib13/sp/AssertionConsumerService.php" index="2"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://maestral.fit.fraunhofer.de/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>maestral.fit.fraunhofer.de</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>
MIIC7zCCAligAwIBAgIJAJtYT/Wq1EepMA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNV
BAYTAkRFMQwwCgYDVQQKEwNHTUQxDDAKBgNVBAsTA0ZJVDELMAkGA1UEAxMCY2Ex
LTArBgkqhkiG9w0BCQEWHmdlcmQud29ldHplbEBmaXQuZnJhdW5ob2Zlci5kZTAe
Fw0wOTAxMTQxNTQ1NTdaFw0xMTAzMjUxNTQ1NTdaMHAxCzAJBgNVBAYTAkRFMQww
CgYDVQQKEwNGSEcxDDAKBgNVBAsTA0ZJVDEWMBQGA1UEAxMNbWFlc3RyYWwtc2hp
YjEtMCsGCSqGSIb3DQEJARYeZ2VyZC53b2V0emVsQGZpdC5mcmF1bmhvZmVyLmRl
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcfsEdqjPPv++2loflmivC/V3P
nzRmxWPJBEd1QjnBtMjzUx0P38O33f7sfpNYL3o6e1eV1ksYbyqfZjuB5taLoH7b
YDmJjnGKN2Il047DnqWKPPHd3wXkZLWpNw4zWXsztwSOD9QZAT8ESdzQo8B4p/HL
r2Wpuh20uPcMJ3ErZwIDAQABo4GbMIGYMAwGA1UdEwEB/wQCMAAwKQYDVR0RBCIw
IIEeZ2VyZC53b2V0emVsQGZpdC5mcmF1bmhvZmVyLmRlMA4GA1UdDwEB/wQEAwID
uDA6BglghkgBhvhCAQ0ELRYrbW9kX3NzbCBnZW5lcmF0ZWQgY3VzdG9tIGNsaWVu
dCBjZXJ0aWZpY2F0ZTARBglghkgBhvhCAQEEBAMCBaAwDQYJKoZIhvcNAQEFBQAD
gYEAhV3Wp4Mwaphjo+XH//1wLbsl2ETTfgAZcynYl5/aYKdqwClLFD+ih4EQcnVr
e77xtFihegeNQAXQTrxR1J3pxoQQzZdQuF96Z+2Q8J6VN+ZDkzchk32pUmMPAs9j
VYxCqUHYXs7OPn5z8h17ctJEvl0gjJGHgV6tu5m9HLRrt/w=
						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML/POST" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML/POST" index="6" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML/Artifact" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://maestral.fit.fraunhofer.de/Shibboleth.sso/SAML/Artifact" index="8"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Not public -->
		<EntityDescriptor entityID="https://ebulobo.switch.ch/simplesaml">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>ebulobo.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ebulobo.switch.ch/simplesaml/saml2/sp/SingleLogoutService.php"></SingleLogoutService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ebulobo.switch.ch/simplesaml/saml2/sp/AssertionConsumerService.php" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ebulobo.switch.ch/simplesaml/shib13/sp/AssertionConsumerService.php" index="2" isDefault="true"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
	</EntitiesDescriptor>
	<!-- Forced SAML 2 Attribute Pull Service Providers -->
	<EntitiesDescriptor Name="https://www.switch.ch/aai/SAML2/Attribute-Pull">
		<!-- Shibboleth 2 SP and EZProxy Test Host -->
		<EntityDescriptor entityID="https://dieng.switch.ch/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>dieng.switch.ch</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dieng.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.dieng.switch.ch/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.dieng.switch.ch/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.dieng.switch.ch/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.dieng.switch.ch/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dieng.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.dieng.switch.ch/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.dieng.switch.ch/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.dieng.switch.ch/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dieng.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.dieng.switch.ch/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dieng.switch.ch/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML2/POST" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dieng.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dieng.switch.ch/Shibboleth.sso/SAML2/Artifact" index="5"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML2/Artifact" index="6"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://dieng.switch.ch/Shibboleth.sso/SAML2/ECP" index="7"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML2/ECP" index="8"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dieng.switch.ch/Shibboleth.sso/SAML/POST" index="9" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML/POST" index="10"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://dieng.switch.ch/Shibboleth.sso/SAML/Artifact" index="11"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://login.dieng.switch.ch/Shibboleth.sso/SAML/Artifact" index="12"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- shib-test-fhnw -->
		<EntityDescriptor entityID="https://147.86.9.134/shibboleth">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>147.86.9.134</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://147.86.9.134/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://147.86.9.134/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://147.86.9.134/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://147.86.9.134/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://147.86.9.134/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://147.86.9.134/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://147.86.9.134/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://147.86.9.134/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://147.86.9.134/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://147.86.9.134/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://147.86.9.134/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://147.86.9.134/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://147.86.9.134/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://147.86.9.134/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
		<!-- Shib1.OntheHub.com -->
		<EntityDescriptor entityID="https://shib1.onthehub.com/shibboleth-sp">
			<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
			<KeyDescriptor>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:KeyName>shib1.onthehub.com</ds:KeyName>
					<ds:X509Data>
						<ds:X509Certificate>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						</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</KeyDescriptor>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib1.onthehub.com/Shibboleth.sso/SLO/Redirect"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib1.onthehub.com/Shibboleth.sso/SLO/POST"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shib1.onthehub.com/Shibboleth.sso/SLO/Artifact"></SingleLogoutService>
			<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib1.onthehub.com/Shibboleth.sso/SLO/SOAP"></SingleLogoutService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib1.onthehub.com/Shibboleth.sso/NIM/Redirect"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib1.onthehub.com/Shibboleth.sso/NIM/POST"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shib1.onthehub.com/Shibboleth.sso/NIM/Artifact"></ManageNameIDService>
			<ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib1.onthehub.com/Shibboleth.sso/NIM/SOAP"></ManageNameIDService>
				<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
				<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML2/POST" index="1"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML2/Artifact" index="3"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML2/ECP" index="4"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML/POST" index="5" isDefault="true"></AssertionConsumerService>
			<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://shib1.onthehub.com/Shibboleth.sso/SAML/Artifact" index="6"></AssertionConsumerService>
			</SPSSODescriptor>
		</EntityDescriptor>
	</EntitiesDescriptor>
</EntitiesDescriptor>